| CVE-2017-15715 |
In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious…
|
Not rated
|
Mar 26, 2018 |
| CVE-2017-15710 |
In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with…
|
Not rated
|
Mar 26, 2018 |
| CVE-2017-9798 |
Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a…
|
Not rated
|
Sep 18, 2017 |
| CVE-2016-8743 |
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and…
|
Not rated
|
Jul 27, 2017 |
| CVE-2016-2161 |
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and…
|
Not rated
|
Jul 27, 2017 |
| CVE-2016-0736 |
In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured…
|
Not rated
|
Jul 27, 2017 |
| CVE-2017-7659 |
A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a…
|
Not rated
|
Jul 26, 2017 |
| CVE-2017-9789 |
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access…
|
Not rated
|
Jul 13, 2017 |
| CVE-2017-9788 |
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type…
|
Not rated
|
Jul 13, 2017 |
| CVE-2017-7679 |
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when…
|
Not rated
|
Jun 20, 2017 |
| CVE-2017-7668 |
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which…
|
Not rated
|
Jun 20, 2017 |
| CVE-2017-3169 |
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party…
|
Not rated
|
Jun 20, 2017 |
| CVE-2017-3167 |
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules…
|
Not rated
|
Jun 20, 2017 |
| CVE-2016-8740 |
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or…
|
Not rated
|
Dec 5, 2016 |