USN-8898-1 apache2 vulnerabilities

It was discovered that Apache HTTP Server's modrewrite module incorrectly handled memory when performing certain variable lookups. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-56154 Lucian Nitescu, Simon Kappel, and Gianluca...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

CVE-2021-41773

Apache HTTP Server 2.4.49 - Path Traversal & RCE CVE-2021-41773 Сложный эксплойт на Python PoC для CVE-2021-41773. Этот инструмент автоматизирует процесс проверки серверов Apache 2.4.49 на уязвимости path traversal и удаленного выполнения кода RCE. ⚠️ Юридический отказ от ответственности Этот...

BIT-APACHE-2026-63718 Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling

Inconsistent Interpretation of HTTP Requests 'HTTP Request/Response Smuggling' response smuggling vulnerability in Apache HTTP Server via modproxyuwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.68...

Apache-Authentication-Flaw-Research-CVE-2024-38476-

🛡️ Исследование уязвимости аутентификации Apache CVE-2024-38476 Подготовил: Abanoub Ehab 🛡️ Студенческий клуб телекоммуникаций Huawei - AOU Комплексная техническая исследовательская работа по уязвимости семантической неоднозначности в Apache HTTP Server и её влиянию на обработку ответов бэкенда. 📝...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

Important: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important...

apache-vulnerability-testing

Apache HTTP Server 취약점 테스트 도구 이 저장소는 Apache HTTP Server의 다양한 취약점파일명 혼동 공격, SSRF, 서비스 거부Denial of Service 및 최근 CVE와 관련된 기타 취약점을 테스트하기 위한 개념 증명PoC 을 제공합니다. 이 도구는 서버가 특정 유형의 공격에 취약한지 평가하기 위해 조작된 HTTP 요청을 전송합니다. 기능 다음을 포함한 여러 취약점 테스트: CVE-2024-38472 : Windows UNC SSRF를 통한 Apache HTTP Server...

CVE-2021-41773-L-

CVE-2021-41773 🐛 Apache HTTP Server 2.4.49에서의 경로 탐색 및 파일 노출 취약점 Apache HTTP Server 2.4.49의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 탐색 공격을 사용하여 Alias와 같은 지시문으로 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이러한 디렉터리 외부의 파일이 일반적인 기본 구성인 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이러한 별칭 경로에 CGI 스크립트가 활성화된 경우...

CVE-2021-41773

CVE-2021-41773 — Эксплуатация Path Traversal и RCE в Apache Описание прохождения комнаты TryHackMe "Modern Web Stacks" , посвященной эксплуатации CVE-2021-41773 — уязвимости path traversal в Apache HTTP Server 2.4.49, которая приводит к удаленному выполнению кода при включенном modcgi. Краткая...

[SECURITY] Fedora 44 Update: httpd-2.4.69-1.fc44

The Apache HTTP Server is a powerful, efficient, and extensible web server...

RHEL 8 : mod_auth_openidc:2.3 (RHSA-2026:77371)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:77371 advisory. The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Conne...

CentOS Linux 8.4 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791392163)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791392163 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTT...

CentOS Linux 8.5 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791391794)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791391794 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTT...

CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791396690)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791396690 advisory. - NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache...

CVE-2026-23918-poc

CVE-2026-23918 — Double Free в Apache modhttp2 Затронуто: Apache HTTP Server 2.4.66 с modhttp2 + Event MPM Исправлено в: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — возможно неаутентифицированное удалённое выполнение кода CWE: CWE-415 Double Free В чем заключается уязвимость modhttp2 в Apach...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Обзор CVE-2026-49975 — это уязвимость типа Отказ в обслуживании DoS в Apache HTTP Server. Уязвимость возникает в пути обработки HTTP/2 запросов, где несколько полей заголовка cookie могут быть объединены без правильного учёта в...

CVE-2019-0211-exploit

CVE-2019-0211 — Apache HTTP Server 로컬 권한 상승 CARPE DIEM 설명 CVE-2019-0211 은 Apache HTTP Server 의 2.4.17 – 2.4.38 버전에서 modprefork 및 modphp또는 PHP-FPM와 함께 사용될 때 발생하는 로컬 권한 상승 취약점입니다. 이 취약점은 www-data 셸을 보유한 공격자가 PHP의 Use-After-FreeUAF 와 Apache scoreboard 손상을 결합하여 root 로 권한을 상승시킬 수 있게 합니다. Apache가...

CVE-2019-10092

CVE-2019-10092: Apache HTTP Server의 "Proxy Error" 페이지를 통한 제한적 크로스 사이트 스크립팅 Apache HTTP Server 2.4.0-2.4.39에서 modproxy 오류 페이지에 영향을 주는 제한적 크로스 사이트 스크립팅 문제가 보고되었습니다. 공격자는 오류 페이지의 링크를 잘못된 형태로 만들어 자신이 선택한 페이지를 가리키도록 할 수 있습니다. 이 취약점은 프록시가 활성화되어 있지만 Proxy Error 페이지가 표시되도록 잘못 구성된 서버에서만 악용될 수 있습니다. 공급업체 공...