7397 matches found
Oracle Linux 9 : httpd (ELSA-2026-41906)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41906 advisory. - Resolves: RHEL-192752 - modproxyhtml regression in CVE-2026-34355 fix - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflo...
httpd security, bug fix, and enhancement update
2.4.62-13.0.1.el98.5 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.5 - Resolves: RHEL-192752 - modproxyhtml regression in CVE-2026-34355 fix 2.4.62-13.4 - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers...
K000162320: Apache HTTP server vulnerability CVE-2026-44119
Security Advisory Description Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to...
mod_md security update
1:2.4.26-5.1 - Resolves: RHEL-175647 - modmd: OCSP response limits CVE-2026-29168 1:2.4.26-5 - Resolves: RHEL-134484 - httpd: Apache HTTP Server: modmd ACME, unintended retry intervals CVE-2025-55753 1:2.4.26-3 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 1:2.4.26-2 - Bump...
MiracleLinux 9 : httpd-2.4.62-13.el9_8.1 (AXSA:2026-1272:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1272:07 advisory. httpd: modproxyajp: heap-based buffer over-read and memory disclosure in ajpparsedata CVE-2026-34059 httpd: modproxyajp: heap-based buffer over-read...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 The GREENDARK hospi...
K000162269: Apache HTTP Server Vulnerabilities CVE-2026-42535 and CVE-2026-42536
Security Advisory Description CVE-2026-42535 A path handling issue in moddavfs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes. Users are recommended to upgrade to version 2.4.68, which...
Apache HTTP Server mod_lda Module RCE
The vulnerability of the modlda module in the Apache HTTP Server is related to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack...
Apache HTTP Server mod_proxy_ftp DoS
The vulnerability of the modproxyftp module in the Apache HTTP Server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Apache HTTP Server mod_xml2enc DoS
The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-2653)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache...
EulerOS 2.0 SP10 : httpd (EulerOS-SA-2026-2693)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's modmd via OCSP response data. This issue affects Apache...
Important: Red Hat Security Advisory: httpd:2.4 security update
An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Commo...
httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...
Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow
A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...
httpd: mod_proxy_ajp: off-by-one out-of-bounds reads in AJP getter functions
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the AJP getter functions attempt to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause an out-of-bounds read. This issue leads to a denial of...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-42013 - Apache HTTP Server 2.4.50 경로 조작 RCE 작성: eu...
RHEL 8 : httpd:2.4 (RHSA-2026:36373)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36373 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Apache HTTP...
RLSA-2026:34109 Important: httpd security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...
