6512 matches found
EulerOS 2.0 SP15 : httpd (EulerOS-SA-2026-3781)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.x000D Users are recommended to...
EulerOS 2.0 SP10 : mod_http2 (EulerOS-SA-2026-3752)
According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP requests...
EulerOS Virtualization 2.12.0 : httpd (EulerOS-SA-2026-3643)
According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.This issue affects Apache HTTP Server: through...
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-3742)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem leads to CWE-12...
EulerOS Virtualization 2.12.0 : mod_http2 (EulerOS-SA-2026-3652)
According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...
EulerOS Virtualization 2.11.1 : mod_http2 (EulerOS-SA-2026-3441)
According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In certain proxy configurations, a denial of service attack againstApache HTTP Server versions 2.4.26 through to 2.4.63 can be...
[SECURITY] [DSA 6504-1] libapache2-mod-auth-openidc security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6504-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 17, 2026 https://www.debian.org/security/faq -...
Exploit for Improper Handling of Highly Compressed Data (Data Amplification) in Apache Http_Server
!Go Versionhttps://img.shields.io/badge/Go-1.26%2B-00ADD8?lo...
MiracleLinux 8 : httpd:2.4 (AXSA:2026-1840:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1840:01 advisory. httpd: Apache HTTP Server: Arbitrary code execution or denial of service via use-after-free in modldap per-directory configuration CVE-2026-29167 Tenable has...
Astra Linux – Vulnerability in Apache2
The “Use After Free” vulnerability in the Apache HTTP Server module modhttp2 occurs when file handles are already exhausted. This issue affects Apache HTTP Server versions 2.4.55 through 2.4.67...
Astra Linux – Vulnerability in Apache2
The out-of-bounds write vulnerability in the modsed module of the Apache HTTP Server allows an attacker to overwrite heap memory with data provided by the attacker. This issue affects Apache HTTP Server version 2.4.2.52 and earlier versions...
Astra Linux – Vulnerability in Apache2
A buffer overflow in modproxyhtml in the Apache HTTP Server 2.4.67 and earlier versions allows an attack by a untrusted backend. Users are recommended to upgrade to version 2.4.68, which fixes this issue...
Astra Linux – Vulnerability in Apache2
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with modxml2enc, xml2StartParse, and untrusted content This issue affects Apache HTTP Server: versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes this issue...
Astra Linux – Vulnerability in Apache2
A buffer overwrite vulnerability exists in the Apache HTTP Server, due to poorly crafted regular expressions in the configuration. This issue affects the Apache HTTP Server versions from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, as this version fixes the...
Astra Linux – Vulnerability in Apache2
There is a vulnerability in the modproxyftp module of the Apache HTTP Server, known as the “Infinite Loop” condition, which can lead to an infinite loop when using an attacker-controlled FTP server. This issue affects versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version...
Astra Linux – Vulnerability in Apache2
A memory allocation vulnerability with an excessive size value in Apache HTTP Server’s modhttp leads to a denial of service due to malicious HTTP requests. This issue affects Apache HTTP Server versions 2.4.17 through 2.4.67...
Astra Linux – Vulnerability in Apache2
Buffer Over-read vulnerability in Apache HTTP Server due to outbound OCSP requests sent to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which addresses this vulnerability...
Astra Linux – Vulnerability in Apache2
A carefully crafted request body can cause a read to a random memory area, which may lead to the process crashing. This issue affects Apache HTTP Server 2.4.52 and earlier...
Astra Linux – Vulnerability in Apache2
A out-of-bounds read vulnerability exists in the Apache HTTP Server with modheaders and modmime, involving multiple response languages. This issue affects the Apache HTTP Server version 2.4.0 through 2.4.67...
Astra Linux – Vulnerability in Apache2
Some modproxy configurations on the Apache HTTP Server versions 2.4.0 through 2.4.55 allow for an HTTP Request Smuggling attack. These configurations are affected when modproxy is enabled along with some form of RewriteRule or ProxyPassMatch, where a non-specific pattern matches a portion of the...