7179 matches found
CLSA-2026-1781253209 httpd: Fix of CVE-2025-58098
CVE-2025-58098: modcgid with SSI exec cmd passed the shell-escaped query string as extra arguments to the executed shell command; do not pass r-args for SSI requests...
httpd: Fix of CVE-2025-58098
CVE-2025-58098: modcgid with SSI exec cmd passed the shell-escaped query string as extra arguments to the executed shell command; do not pass r-args for SSI requests...
Critical Photon OS Security Update - PHSA-2026-5.0-0881
Updates of 'httpd', 'ansible' packages of Photon OS have been released...
MiracleLinux 8 : httpd:2.4 (AXSA:2026-786:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-786:01 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Critical Photon OS Security Update - PHSA-2026-5.0-91-0881
Updates of 'httpd', 'ansible' packages of Photon OS have been released...
Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destru...
RLSA-2026:25225 Important: mod_http2 security update
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 For more details about the security issues, including the impact, a...
CLSA-2026-1781261042 httpd: Fix of 6 CVEs
CVE-2026-29167: modldap use-after-free in per-directory config, deep-copy clientcerts into the connection pool - CVE-2026-34356: modproxy heap buffer overflow in approxycookiereversemap, reset newpath/newdomain state on duplicate path=/domain= cookie attributes from a malicious backend...
CLSA-2026-1781210149 httpd: Fix of 6 CVEs
CVE-2026-29167: fix modldap use-after-free with per-directory LDAP config - CVE-2026-29170: fix modproxyftp XSS in generated FTP directory listings - CVE-2026-34355: fix modproxyhtml buffer overflow via apvarbuf API migration - CVE-2026-34356: fix modproxy heap buffer overflow in...
CLSA-2026-1781209763 httpd: Fix of 6 CVEs
CVE-2026-29167: fix modldap use-after-free with per-directory LDAP config - CVE-2026-29170: fix modproxyftp XSS in generated FTP directory listings - CVE-2026-34355: fix modproxyhtml buffer overflow via apvarbuf API migration - CVE-2026-34356: fix modproxy heap buffer overflow in...
CLSA-2026-1781194173 httpd: Fix of 6 CVEs
CVE-2026-29167: fix modldap use-after-free with per-directory LDAP config - CVE-2026-29170: fix modproxyftp XSS in generated FTP directory listings - CVE-2026-34355: fix modproxyhtml buffer overflow via apvarbuf API migration - CVE-2026-34356: fix modproxy heap buffer overflow in...
RHSA-2026:25090 Red Hat Security Advisory: httpd:2.4 security update
Bulletin has no description...
RockyLinux 8 : httpd:2.4 (RLSA-2026:25090)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:25090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Fedora 44 : httpd (2026-d4136fe979)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4136fe979 advisory. - new version 2.4.68 - fixes various security issues Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
AlmaLinux 8 : httpd:2.4 (ALSA-2026:25090)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:25090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Important: Red Hat Security Advisory: httpd:2.4 security update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-44185 affecting package httpd for versions less than 2.4.68-1
CVE-2026-44185 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-48913 affecting package httpd for versions less than 2.4.68-1
CVE-2026-48913 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...