5878 matches found
httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...
httpd: Fix of 2 CVEs
CVE-2026-29170: modproxyftp: XSS in generated HTML directory listing; escape entry names with apescapehtmlaposescapepath instead of apescapeuri in href attributes - CVE-2026-42535: moddavfs: deny WebDAV access to or within the DAVFSSTATEDIR state directory to prevent manipulation of trusted...
Amazon Linux 2 : httpd, --advisory ALAS2-2026-3379 (ALAS-2026-3379)
The version of httpd installed on the remote host is prior to 2.4.68-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3379 advisory. Use After Free vulnerability in Apache HTTP Server with modldap in per-directory configuration This issue affects Apache HT...
Oracle Linux 8 : httpd:2.4 (ELSA-2026-25090)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-25090 advisory. - Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server modproxyajp: Arbitrary code execution via heap-based buffer overflow CVE-2026-28780 - Resolves:...
Photon OS 5.0: Httpd PHSA-2026-5.0-0881
An update of the httpd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0881. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Critical Photon OS Security Update - PHSA-2026-5.0-91-0881
Updates of 'ansible', 'httpd' packages of Photon OS have been released...
MiracleLinux 8 : httpd:2.4 (AXSA:2026-786:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-786:01 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Critical Photon OS Security Update - PHSA-2026-5.0-0881
Updates of 'httpd', 'ansible' packages of Photon OS have been released...
Exploit for Memory Allocation with Excessive Size Value in Apache Http_Server
http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destru...
RLSA-2026:25225 Important: mod_http2 security update
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 For more details about the security issues, including the impact, a...
RHSA-2026:25090 Red Hat Security Advisory: httpd:2.4 security update
Bulletin has no description...
RockyLinux 8 : httpd:2.4 (RLSA-2026:25090)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:25090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Fedora 44 : httpd (2026-d4136fe979)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d4136fe979 advisory. - new version 2.4.68 - fixes various security issues Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
AlmaLinux 8 : httpd:2.4 (ALSA-2026:25090)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:25090 advisory. httpd: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack CVE-2026-49975 Tenable has extracted the preceding description block...
Important: Red Hat Security Advisory: httpd:2.4 security update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-34355 affecting package httpd for versions less than 2.4.68-1
CVE-2026-34355 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1
CVE-2026-42535 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-42536 affecting package httpd for versions less than 2.4.68-1
CVE-2026-42536 affecting package httpd for versions less than 2.4.68-1. A patched version of the package is available...
CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1
CVE-2026-49975 affecting package httpd for versions less than 2.4.68-1. An upgraded version of the package is available that resolves this issue...