Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 376

Export CSV
CVE-2023-27522

Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Apache Debian Redhat and 1 more
Products
Http Server Debian Linux Enterprise Linux and 3 more
CVE-2014-3250

puppet: certificates could be honored even when revoked

The default vhost configuration file in Puppet before 3.6.2 does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apache Puppet Redhat
Products
Http Server Puppet Linux
CVE-2016-0736

httpd: Padding Oracle in Apache mod_session_crypto

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly either CBC or ECB modes of operation (AES256-CBC by default), hence no selectable or builtin authenticated encryption. This made it vulnerable to padding oracle attacks, particularly with CBC.

CVSS 3.0 · 7.5 High EPSS 49.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Core Services and 1 more
CVE-2016-2161

httpd: DoS vulnerability in mod_auth_digest

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.

CVSS 3.0 · 7.5 High EPSS 21.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Core Services and 1 more
CVE-2016-8743

httpd: Apache HTTP Request Parsing Whitespace Defects

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.

CVSS 3.1 · 7.5 High EPSS 13.3% KEV · Not listed
Vendors
Apache Debian Netapp and 1 more
Products
Http Server Debian Linux Clustered Data Ontap and 10 more
CVE-2017-3169

httpd: mod_ssl NULL pointer dereference

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.

CVSS 3.0 · 9.8 Critical EPSS 20.0% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Jboss Core Services and 2 more
CVE-2017-7659

httpd: mod_http2 NULL pointer dereference

A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.

CVSS 3.0 · 7.5 High EPSS 53.9% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Rhel Software Collections
CVE-2017-7668

httpd: ap_find_token() buffer overread

The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.

CVSS 3.1 · 7.5 High EPSS 57.5% KEV · Not listed
Vendors
Apache Apple Debian and 3 more
Products
Http Server Mac Os X Debian Linux and 13 more
CVE-2017-9788

httpd: Uninitialized memory reflection in mod_auth_digest

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.

CVSS 3.0 · 9.1 Critical EPSS 56.8% KEV · Not listed
Vendors
Apache Apple Debian and 3 more
Products
Http Server Mac Os X Debian Linux and 15 more
CVE-2017-9789

httpd: Read after free in mod_http2

When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.

CVSS 3.0 · 7.5 High EPSS 9.5% KEV · Not listed
Vendors
Apache
Products
Http Server
CVE-2014-3523

httpd: WinNT MPM denial of service

Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted requests.

CVSS 3.0 · 7.5 High EPSS 16.8% KEV · Not listed
Vendors
Apache Microsoft Redhat
Products
Http Server Windows Jboss Core Services
CVE-2013-4352

httpd: mod_cache NULL pointer dereference crash

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

CVSS 2.0 · 4.3 Medium EPSS 11.5% KEV · Not listed
Vendors
Apache Redhat
Products
Http Server Enterprise Linux Rhel Software Collections
CVE-2013-5704

httpd: bypass of mod_headers rules via chunked requests

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVSS 2.0 · 5.0 Medium EPSS 58.0% KEV · Not listed
Vendors
Apache Apple Canonical and 2 more
Products
Http Server Mac Os X Mac Os X Server and 14 more
CVE-2013-6438

httpd: mod_dav denial of service via crafted DAV WRITE request

The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause a denial of service (daemon crash) via a crafted DAV WRITE request.

CVSS 2.0 · 5.0 Medium EPSS 27.5% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Http Server and 3 more
CVE-2014-0098

httpd: mod_log_config does not properly handle logging certain cookies resulting in DoS

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

CVSS 2.0 · 5.0 Medium EPSS 26.7% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Http Server and 4 more
CVE-2014-3583

httpd: mod_proxy_fcgi handle_headers() buffer over read

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.

CVSS 2.0 · 5.0 Medium EPSS 10.8% KEV · Not listed
Vendors
Apache Apple Canonical and 1 more
Products
Http Server Mac Os X Os X Server and 3 more
CVE-2014-3581

httpd: NULL pointer dereference in mod_cache if Content-Type has empty value

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

CVSS 2.0 · 5.0 Medium EPSS 13.5% KEV · Not listed
Vendors
Apache Canonical Oracle and 1 more
Products
Http Server Ubuntu Linux Enterprise Manager Ops Center and 9 more
CVE-2014-8109

httpd: LuaAuthzProvider argument handling issue

mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration that specifies authorization for one group to access a certain directory, and authorization for a second group to access a second directory.

CVSS 2.0 · 4.3 Medium EPSS 22.0% KEV · Not listed
Vendors
Apache Canonical Fedoraproject and 1 more
Products
Http Server Ubuntu Linux Fedora and 1 more