CVE-2025-65082

The Apache HTTP Server versions 2.4.0 through 2.4.65 are vulnerable to an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability (CWE-150). The root cause is that environment variables defined via the Apache configuration can unexpectedly supersede variables calculated by the...

CVE-2009-3095

CVE-2009-3095 is a vulnerability in Apache httpd’s mod_proxy_ftp that allows remote authenticated attackers to bypass access restrictions and send arbitrary commands to an FTP server via crafted HTTP Authorization header vectors. The issue is part of a set of fixes for mod_proxy_ftp in the same a...

CVE-2025-55753

An integer overflow in the mod_md (ACME) component of the Apache HTTP Server (versions 2.4.30 to 2.4.65) causes the backoff timer to reset to 0 after repeated failed ACME certificate renewals (typically after ~30 days). This leads to immediate, repeated renewal attempts without delays. To mitigat...

CVE-2025-49812

Apache HTTP Server versions through 2.4.63 are vulnerable to an HTTP desynchronisation attack via mod_ssl . Specifically, a man-in-the-middle attacker can hijack an HTTP session using a TLS upgrade . This issue only affects configurations where "SSLEngine optional" is used to enable TLS upgrades....

CVE-2019-0190

Apache HTTP Server mod_ssl denial of service (CVE-2019-0190) occurs when renegotiations are mishandled with OpenSSL 1.1.1+, causing a loop and potential DoS. According to ALAS-2019-1166 and related advisories, the fix is to upgrade to Apache httpd 2.4.38 (mod_ssl 2.4.38) or newer; affected compon...

CVE-1999-1237

CVE-1999-1237 describes multiple buffer overflows in the smbvalid/smbval SMB authentication library, as used by Apache::AuthenSmb and potentially other modules. The vulnerability allows remote attackers to execute arbitrary commands by sending excessively long usernames, passwords, or via other u...

CVE-2014-3581

Apache HTTP Server vulnerability CVE-2014-3581 affects the mod_cache component (cache_util.c) in the httpd 2.4.x line, before 2.4.11. An empty Content-Type header can trigger a NULL pointer dereference in cache_merge_headers_out, leading to a denial of service (application crash). Public advisori...

CVE-2008-0455

CVE-2008-0455 is an XSS vulnerability in the mod_negotiation module of Apache HTTP Server. A remote authenticated attacker can upload a file whose name contains XSS sequences and a file extension, causing arbitrary script/HTML to be injected into HTTP responses (notably for 406 Not Acceptable or ...

CVE-2024-47252

Apache HTTP Server version 2.4.63 and earlier is vulnerable to insufficient escaping of user-supplied data within the mod_ssl module. In configurations where CustomLog utilizes %{varname}x or %{varname}c to log variables such as SSL_TLS_SNI , the mod_log_config and mod_ssl modules fail to perform...

CVE-2006-3747

CVE-2006-3747 describes an off-by-one error in the LDAP scheme handling of Apache’s mod_rewrite. The issue affects Apache versions with RewriteEngine enabled and certain LDAP URL rules, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code. Affected range...

CVE-2010-0434

CVE-2010-0434 affects the Apache HTTP Server 2.2.x series (pre-2.2.15) where the ap_read_request handling in server/protocol.c for multithreaded MPMs could disclose memory contents by accessing headers of subrequests tied to an earlier request. Public sources in connected docs (e.g., Debian secur...

CVE-2004-0492

Apache mod_proxy vulnerability CVE-2004-0492 is a heap-based overflow in proxy_util.c affecting Apache 1.3.25–1.3.31. A remote attacker can trigger a denial of service (process crash) and possibly execute arbitrary code by sending a negative Content-Length header, causing excessive data copy. The...

CVE-2024-40725

CVE-2024-40725 affects Apache HTTP Server core (httpd) and arises from a partial fix for CVE-2024-39884 in 2.4.61 that can leak local content when legacy content-type based configuration (AddType and similar) is used, potentially serving PHP scripts as source code under indirect requests. The iss...

CVE-2026-42535

A path handling issue in the mod_dav_fs module of Apache HTTP Server versions 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases . This manipulation can potentially result in child process crashes , leading to a Denial of Service (DoS) conditio...

CVE-2018-8011

The Apache HTTP Server (affected version 2.4.33 ) contains a denial of service (DoS) vulnerability in the mod_md challenge handler. Due to insufficient input validation , a specially crafted HTTP request can cause the handler to dereference a NULL pointer , resulting in a segmentation error (segf...

CVE-2024-42516

The Apache HTTP Server core is vulnerable to HTTP response splitting because response headers are not properly sanitized before being sent. An attacker who can manipulate the Content-Type response headers of hosted or proxied applications can split the HTTP response. This issue was previously des...

CVE-2008-2939

CVE-2008-2939 is an XSS vulnerability in the Apache HTTP Server when using the mod_proxy_ftp module. The flaw arises from insufficient sanitization of user-supplied data in FTP URIs, specifically involving a wildcard in the last directory component of the pathname. A remote attacker could inject ...

CVE-2007-5000

CVE-2007-5000 affects Apache HTTP Server mod_imap and mod_imagemap (v1.3.0–1.3.39 and v2.0.35–2.0.61). The flaw is due to insufficient input validation, allowing remote script/HTML injection via unspecified vectors. Public advisories note fixes in later Apache releases (and related packages); mit...

CVE-2007-0086

CVE-2007-0086 targets the Apache HTTP Server. The documented effect is a denial of service caused by a Range header that can cause network bandwidth consumption when a TCP connection is opened with a large window size, via multiple copies of the same fragment. The connected documents provide conc...

CVE-2025-49630

The Apache HTTP Server (versions 2.4.26 through 2.4.63) is vulnerable to a denial of service (DoS) attack due to a reachable assertion in the mod_proxy_http2 module. This issue can be triggered by untrusted clients in specific proxy configurations, specifically when a reverse proxy is configured ...

CVE-2009-1195

CVE-2009-1195 affects the Apache HTTP Server 2.2.x line (2.2.11 and earlier). The issue arises from improper handling of the Options=IncludesNOEXEC in the AllowOverride directive, enabling local users to configure .htaccess files to enable script execution via (1) Options Includes, (2) Options +I...

CVE-2009-1955

CVE-2009-1955 affects the Expact XML parser used by the apr_xml_* interface in xml/apr_xml.c of APR-util, with the vulnerability present in APR-util prior to 1.3.7. In Apache HTTP Server deployments that enable mod_dav and mod_dav_svn, a crafted XML document containing a large number of nested en...

CVE-2007-0450

CVE-2007-0450 is a directory traversal vulnerability affecting Apache Tomcat (and Tomcat behind certain Apache proxies) where a crafted URI containing a dot-dot sequence and mixed separators (/, , and %5C) can cause unauthorized disclosure of arbitrary files. Affected products/versions include To...

CVE-2024-43394

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache HTTP Server versions 2.4.0 through 2.4.63 on Windows systems. The root cause is the processing of unvalidated request input via mod_rewrite or Apache expressions, which can allow an attacker to potentially leak NTLM hashes to a m...

CVE-2026-33006

A timing attack exists in the mod_auth_digest module of the Apache HTTP Server (version 2.4.66). The vulnerability stems from the use of a non-constant-time strcmp() function for comparing nonce-hashes and response-digests, which allows a remote attacker to bypass Digest authentication by exploit...

CVE-2024-43204

A Server-Side Request Forgery (SSRF) vulnerability exists in the Apache HTTP Server when mod_proxy is loaded. The flaw is triggered by an unlikely configuration where mod_headers is used to modify the Content-Type header of a request or response using a value provided by the user. An attacker can...

CVE-2026-34032

The Apache HTTP Server is vulnerable to an Improper Null Termination and Out-of-bounds Read vulnerability in the mod_proxy_ajp module. The root cause is located in the ajp_msg_get_string() function, where insufficient length checks allow for reading data beyond the permitted memory range. This fl...

CVE-2025-54090

A bug in Apache HTTP Server 2.4.64 causes all RewriteCond expr ... tests to evaluate as true . This regression affects the logic of the rewrite engine. Impacted software includes HP-UX Apache-based Web Server (prior to B.2.4.65.00). Users are recommended to upgrade to version 2.4.65 to resolve th...

CVE-2007-6423

The CVE-2007-6423 issue concerns Apache HTTP Server 2.2.x on Windows, where mod_proxy_balancer could trigger memory corruption through a long URL. The Red Hat advisory notes the vulnerability as unspecified and unreproducible by the vendor, while Red Hat indicates that Apache 2.2.7-dev contains a...

CVE-2012-0021

CVE-2012-0021 affects Apache HTTP Server 2.2.17–2.2.21 when using a threaded MPM. The log_cookie function mishandles a %{}C format string in cookies, enabling a remote attacker to cause a denial of service (daemon crash) by sending a cookie with no name and no value. Connected sources (F5 advisor...

CVE-1999-0678

CVE-1999-0678 affects the Apache server configured on Debian GNU/Linux where the default ServerRoot is /usr/doc. This misconfiguration allows remote users to read documentation files for the entire server via the web interface. The issue is caused by serving the /usr/doc directory as part of the ...

CVE-2026-44186

The Apache HTTP Server (versions 2.4.0 through 2.4.67) is vulnerable to a Denial of Service via an infinite loop in the mod_proxy_ftp module. The root cause occurs in proxy_ftp_handler when scanning an FTP 120 greeting for a Retry-After delta-seconds value; the scan loop fails to advance secs_str...

CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x are affected by CVE-2007-6203, where the HTTP Method header is not sanitized when reflected in a 413 Response, enabling cross-site scripting-like attacks via headers sent by the client. The root cause is lack of sanitization of the Method specifier header in suc...

CVE-2008-0456

CVE-2008-0456 : CRLF injection in the mod_negotiation module of Apache HTTP Server (versions 2.2.x up to 2.2.6, 2.0.x up to 2.0.61, and 1.3.x up to 1.3.39) allows remote authenticated users to upload a file with a multi-line name containing HTTP header sequences, enabling injection into HTTP resp...

CVE-2006-3918

CVE-2006-3918 is an Apache HTTP Server/IBM HTTP Server issue where the HTTP Expect header is not sanitized when echoed back in error messages, enabling potential cross-site scripting via headers (as demonstrated with Flash/other clients). Affected products and versions include Apache HTTP Server ...

CVE-2008-2364

The CVE-2008-2364 entry concerns the Apache HTTP Server mod_proxy, specifically the ap_proxy_http_process_response function in the mod_proxy_http.c file for Apache versions 2.0.63 and 2.2.8. The issue is that it does not cap the number of forwarded interim responses, which can lead to memory exha...

CVE-2009-2699

The vulnerability CVE-2009-2699 affects the Solaris pollset feature in the Event Port backend (poll/unix/port.c) of the Apache Portable Runtime (APR) library prior to 1.3.9, as used by Apache HTTP Server prior to 2.2.14 and other products. The issue arises from improper error handling in the Sola...

CVE-2002-2272

CVE-2002-2272 affects Tomcat 4.0–4.1.12 when using mod_jk 1.2.1 with Apache 1.3–1.3.27. A remote attacker can cause a denial of service by sending an HTTP GET request that uses a Transfer-Encoding chunked field with invalid values, leading to desynchronized communications between Apache and Tomca...

CVE-2017-9789

CVE-2017-9789 concerns Apache httpd 2.4.26. The HTTP/2 handling code may access memory after it has been freed when under stress (closing many connections), leading to erratic behavior. Connected advisories confirm the vulnerability is in mod_http2 and suggest upgrading to a fixed version (e.g., ...

CVE-2007-6388

CVE-2007-6388 is an XSS vulnerability in Apache HTTP Server mod_status when the server-status page is enabled. The initial description covers affected versions: Apache HTTP Server 2.2.0–2.2.6, 2.0.35–2.0.61, and 1.3.2–1.3.39, with arbitrary web script/HTML injection possible via unspecified vecto...

CVE-2007-1741

CVE-2007-1741 affects Apache HTTP Server (httpd) and its suexec module (v2.2.3). The issue comprises multiple race conditions between directory/file validation and their usage in suexec, enabling local users to gain privileges and execute arbitrary code by renaming directories or performing symli...

CVE-2026-42536

The Apache HTTP Server (versions 2.4.0 through 2.4.67 ) is vulnerable to a Heap-based Buffer Overflow triggered by mod_xml2enc , specifically involving xml2StartParse when processing untrusted content . This vulnerability can lead to a service failure (Denial of Service) or other impacts dependin...

CVE-2009-3720

CVE-2009-3720 affects Expat 2.0.1 (libexpat) and its use in Python, PyXML, w3c-libwww, etc. Root cause: in lib/xmltok_impl.c, updatePosition handles crafted UTF-8 sequences, causing a buffer over-read and potential application crash (DoS). Connected documents confirm exploits are not detailed bey...

CVE-2009-3094

The CVE-2009-3094 issue affects Apache HTTP Server’s mod_proxy_ftp (ap_proxy_ftp_handler in proxy modules) and is caused by insufficient input validation in responses to EPSV commands. This allowed remote FTP servers to trigger a NULL pointer dereference, crashing a child httpd process and causin...

CVE-2026-33857

Apache HTTP Server versions through 2.4.66 are vulnerable to an out-of-bounds read vulnerability within the mod_proxy_ajp module. The root cause involves off-by-one length check errors in the ajp_msg_get_uint8/uint16/uint32 and ajp_msg_peek_uint8/uint16 functions. A remote attacker could exploit ...

CVE-2026-34355

The Apache HTTP Server (version 2.4.67 and earlier) is vulnerable to a buffer overflow within the mod_proxy_html module. This flaw can be triggered by an untrusted backend server, potentially leading to a security bypass or causing a service failure (denial of service). To mitigate this risk, use...

CVE-2026-29170

A cross-site scripting (XSS) vulnerability exists in the mod_proxy_ftp module of the Apache HTTP Server (version 2.4.67 and earlier). The flaw occurs during the generation of HTML directory listings when the server lists FTP directory contents through either a forward or reverse proxy configurati...

CVE-2006-5752

CVE-2006-5752 is a cross-site scripting (XSS) vulnerability in the Apache HTTP Server mod_status component when ExtendedStatus is enabled and a public server-status page is used. The issue arises via browsers performing charset detection when the content-type is not specified, allowing remote att...

CVE-2009-3560

CVE-2009-3560 is an Expat 2.0.1 XML parsing vulnerability (big2_toUtf8 in libxmltok.c) that can cause a denial of service via malformed UTF-8 sequences in XML, triggering a buffer over-read in doProlog. Connected docs reference Expat/XML parsing context and list vulnerable products/versions; howe...

CVE-2026-34059

The Apache HTTP Server is vulnerable to a heap-based buffer over-read and memory disclosure within the mod_proxy_ajp module. The flaw exists in the ajp_parse_data() function, which occurs when the server handles short AJP replies from a backend server. A malicious actor could exploit this to disc...