httpd: mod_session: Heap overflow via a crafted SessionHeader value

A heap overflow flaw was found In Apache httpd modsession. The highest threat from this vulnerability is to system availability...

httpd: NULL pointer dereference via malformed requests

A NULL pointer dereference in httpd allows an unauthenticated remote attacker to crash httpd by providing malformed HTTP requests. The highest threat from this vulnerability is to system availability...

httpd: Out-of-bounds write in ap_escape_quotes() via malicious input

An out-of-bounds write in function apescapequotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function...

RHEL 7 : httpd (RHSA-2022:0143)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0143 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modlua: Possible...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_is_chunked

Detailed Report: https://oss-fuzz.com/testcase?key=5992343499571200 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x61200008dfff Crash State: apischunked fuzzutils.c Sanitize...

Critical Photon OS Security Update - PHSA-2022-0142

Updates of 'httpd' packages of Photon OS have been released...

CVE-2021-44790 affecting package httpd 2.4.51-1

CVE-2021-44790 affecting package httpd 2.4.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44224 affecting package httpd 2.4.51-1

CVE-2021-44224 affecting package httpd 2.4.51-1. An upgraded version of the package is available that resolves this issue...

Photon OS 3.0: Httpd PHSA-2021-3.0-0346

An update of the httpd package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0346. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_is_chunked

Detailed Report: https://oss-fuzz.com/testcase?key=5911819020009472 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000bac3ff Crash State: apischunked fuzzutils.c Sanitize...

httpd:2.4 security update

httpd 2.4.37-43.0.2 - scoreboard: fix null pointer deference Orabug: 33690670CVE-2021-34798 - fix apescapequote logic Orabug: 33690686CVE-2021-39275...

Critical Photon OS Security Update - PHSA-2022-4.0-0142

Updates of 'httpd' packages of Photon OS have been released...

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

Stack overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

PT-2022-12005 · Asus · Asus Rt-Ax56U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX56U Wi-Fi Router affected versions not specified Description: The issue is related to a stack-based buffer overflow due to improper validation for httpd parameter length. This allows an authenticated local area network attacker to...

CVE-2021-44158: Stack-based Buffer Overflow

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2931)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

apache-httpd:fuzz_utils: Heap-buffer-overflow in ap_is_chunked

Detailed Report: https://oss-fuzz.com/testcase?key=6107355266285568 Project: apache-httpd Fuzzing Engine: afl Fuzz Target: fuzzutils Job Type: aflasanapache-httpd Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60d0002e075f Crash State: apischunked fuzzutils.c Sanitize...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2878)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...