Поиск уязвимостей
Количество 29
Количество 29
openSUSE-SU-2022:0091-1
Security update for apache2
SUSE-SU-2022:0440-1
Security update for apache2
SUSE-SU-2022:0119-1
Security update for apache2
SUSE-SU-2022:0091-2
Security update for apache2
SUSE-SU-2022:0091-1
Security update for apache2
SUSE-SU-2022:0065-1
Security update for apache2
ROS-20211223-04
Множественные уязвимости HTTP-сервера Apache
ALT-PU-2021-3637
ALT-PU-2021-3637: package `apache2` update to version 2.4.52-alt1
ALT-PU-2021-3574
ALT-PU-2021-3574: package `apache2` update to version 2.4.52-alt1
CVE-2021-44224
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
CVE-2021-44224
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
CVE-2021-44224
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
CVE-2021-44224
Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
CVE-2021-44224
A crafted URI sent to httpd configured as a forward proxy (ProxyReques ...
CVE-2021-44790
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVE-2021-44790
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVE-2021-44790
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVE-2021-44790
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
CVE-2021-44790
A carefully crafted request body can cause a buffer overflow in the mo ...
GHSA-92ww-hwmg-qq7p
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2022:0091-1 Security update for apache2 | почти 5 лет назад | ||
| SUSE-SU-2022:0440-1 Security update for apache2 | больше 4 лет назад | ||
| SUSE-SU-2022:0119-1 Security update for apache2 | почти 5 лет назад | ||
| SUSE-SU-2022:0091-2 Security update for apache2 | почти 5 лет назад | ||
| SUSE-SU-2022:0091-1 Security update for apache2 | почти 5 лет назад | ||
| SUSE-SU-2022:0065-1 Security update for apache2 | почти 5 лет назад | ||
 | ROS-20211223-04 Множественные уязвимости HTTP-сервера Apache | почти 5 лет назад | ||
| ALT-PU-2021-3637 ALT-PU-2021-3637: package `apache2` update to version 2.4.52-alt1 | CVSS3: 10 | почти 5 лет назад | |
| ALT-PU-2021-3574 ALT-PU-2021-3574: package `apache2` update to version 2.4.52-alt1 | CVSS3: 10 | почти 5 лет назад | |
 | CVE-2021-44224 A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). | CVSS3: 8.2 | 82% Высокий | почти 5 лет назад |
 | CVE-2021-44224 A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). | CVSS3: 7.1 | 82% Высокий | почти 5 лет назад |
 | CVE-2021-44224 A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). | CVSS3: 8.2 | 82% Высокий | почти 5 лет назад |
 | CVE-2021-44224 Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier | CVSS3: 8.2 | 82% Высокий | почти 5 лет назад |
| CVE-2021-44224 A crafted URI sent to httpd configured as a forward proxy (ProxyReques ... | CVSS3: 8.2 | 82% Высокий | почти 5 лет назад |
| CVE-2021-44790 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. | CVSS3: 9.8 | 97% Критический | почти 5 лет назад |
| CVE-2021-44790 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. | CVSS3: 9.8 | 97% Критический | почти 5 лет назад |
| CVE-2021-44790 A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier. | CVSS3: 9.8 | 97% Критический | почти 5 лет назад |
| CVE-2021-44790 Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier | CVSS3: 9.8 | 97% Критический | почти 5 лет назад |
| CVE-2021-44790 A carefully crafted request body can cause a buffer overflow in the mo ... | CVSS3: 9.8 | 97% Критический | почти 5 лет назад |
| GHSA-92ww-hwmg-qq7p A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). | CVSS3: 8.2 | 82% Высокий | почти 5 лет назад |
Уязвимостей на страницу