Lucene search
K

5876 matches found

OSV
OSV
added 2024/05/22 12:0 a.m.38 views

ALSA-2024:3121 Moderate: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 modhttp2: reset requests exhaust memory incomplete fix of CVE-2023-44487 CVE-2023-45802 For more details about the...

7.5CVSS8.5AI score0.9439EPSS
Exploits20References6
AlmaLinux
AlmaLinux
added 2024/05/22 12:0 a.m.114 views

Moderate: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 modhttp2: reset requests exhaust memory incomplete fix of CVE-2023-44487 CVE-2023-45802 For more details about the...

7.5CVSS7.8AI score0.9439EPSS
Exploits20References6
RedHat Linux
RedHat Linux
added 2024/05/20 1:58 a.m.60 views

Moderate: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS7AI score0.87555EPSS
Exploits2References2
GithubExploit
GithubExploit
added 2024/05/19 11:4 a.m.621 views

Exploit for Server-Side Request Forgery in Resf Rocky_Linux

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

9CVSS8.9AI score0.94432EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2024/05/17 12:0 a.m.43 views

EulerOS Virtualization 3.0.6.0 : httpd (EulerOS-SA-2024-1684)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

7.5CVSS7.2AI score0.01821EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2024/05/17 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1684)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.7AI score0.01821EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/05/17 12:0 a.m.37 views

EulerOS Virtualization 3.0.6.6 : httpd (EulerOS-SA-2024-1653)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57...

7.5CVSS7.4AI score0.00396EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/05/16 6:23 p.m.41 views

Moderate: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.5CVSS7.1AI score0.9439EPSS
Exploits22References3
OpenVAS
OpenVAS
added 2024/05/16 12:0 a.m.30 views

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1653)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.2AI score0.00396EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.78 views

RHEL 7 : httpd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - httpd: modproxy: X-Forwarded-For dropped by hop-by-hop mechanism CVE-2022-31813 - Apache HTTP Server...

9.1AI score0.60552EPSS
Exploits3References21
OSV
OSV
added 2024/05/10 2:32 p.m.36 views

RLSA-2024:2278 Moderate: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS7.5AI score0.00396EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2024/05/10 2:32 p.m.117 views

httpd security update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

7.5CVSS6.9AI score0.00396EPSS
Exploits0
F5 Networks
F5 Networks
added 2024/05/08 5:23 a.m.68 views

K000139447: Apache httpd vulnerability CVE-2024-24795

Security Advisory Description HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this...

6.3CVSS6.7AI score0.01155EPSS
Exploits0Affected Software14
Tenable Nessus
Tenable Nessus
added 2024/05/08 12:0 a.m.62 views

F5 Networks BIG-IP : Apache httpd vulnerability (K000139447)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000139447 advisory. - HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious...

6.3CVSS6.8AI score0.01155EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/05/07 3:50 p.m.87 views

Moderate: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update

Red Hat JBoss Core Services Apache HTTP Server 2.4.57 Service Pack 4 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.6CVSS6.9AI score0.87555EPSS
Exploits6References8
Rockylinux
Rockylinux
added 2024/05/06 1:4 p.m.62 views

httpd:2.4/mod_http2 security update

An update is available for httpd, modmd, modhttp2, module.modmd, module.modhttp2, module.httpd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd package...

7.5CVSS7.2AI score0.87555EPSS
Exploits2
OSV
OSV
added 2024/05/06 1:4 p.m.55 views

RLSA-2024:1786 Important: httpd:2.4/mod_http2 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modhttp2: CONTINUATION frames DoS CVE-2024-27316 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

7.5CVSS7AI score0.87555EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2024/05/06 12:0 a.m.49 views

Oracle Linux 9 : mod_http2 (ELSA-2024-2368)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2368 advisory. 2.0.26-1 - Resolves: RHEL-14691 - modhttp2 rebase to 2.0.26 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

7.5CVSS7.5AI score0.59544EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2024/05/06 12:0 a.m.51 views

Oracle Linux 9 : httpd (ELSA-2024-2278)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-2278 advisory. - Resolves: RHEL-14447 - httpd: modmacro: out-of-bounds read vulnerability CVE-2023-31122 Tenable has extracted the preceding description block directly from th...

7.5CVSS7.4AI score0.00396EPSS
Exploits0References2
Fedora
Fedora
added 2024/05/04 2:19 a.m.46 views

[SECURITY] Fedora 38 Update: httpd-2.4.59-2.fc38

The Apache HTTP Server is a powerful, efficient, and extensible web server...

7.3CVSS7.3AI score0.04473EPSS
Exploits0
Rows per page
Query Builder