rpm package
almalinux/mod_md
pkg:rpm/almalinux/mod_md
Vulnerabilities (77)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-30641 | Med | 5.3 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jun 10, 2021 | Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF' | |
| CVE-2021-26691 | Cri | 9.8 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jun 10, 2021 | In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow | |
| CVE-2021-26690 | Hig | 7.5 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jun 10, 2021 | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service | |
| CVE-2020-35452 | Hig | 7.3 | < 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa | 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa | Jun 10, 2021 | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation | |
| CVE-2020-11993 | Hig | 7.5 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Aug 7, 2020 | Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" w | |
| CVE-2020-11984 | Cri | 9.8 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Aug 7, 2020 | Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE | |
| CVE-2020-1927 | Med | 6.1 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Apr 2, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL. | |
| CVE-2020-1934 | Med | 5.3 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Apr 1, 2020 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server. | |
| CVE-2019-10097 | Hig | 7.2 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Sep 26, 2019 | In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggere | |
| CVE-2019-10092 | Med | 6.1 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Sep 26, 2019 | In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server | |
| CVE-2019-10082 | Cri | 9.1 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Sep 26, 2019 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown. | |
| CVE-2019-10098 | Med | 6.1 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Sep 25, 2019 | In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL. | |
| CVE-2019-10081 | Hig | 7.5 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Aug 15, 2019 | HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the cl | |
| CVE-2019-0197 | Med | 4.2 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jun 11, 2019 | A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration | |
| CVE-2019-0196 | Med | 5.3 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jun 11, 2019 | A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly. | |
| CVE-2018-17199 | Hig | 7.5 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jan 30, 2019 | In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded. | |
| CVE-2018-17189 | Med | 5.3 | < 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | 1:2.0.8-8.module_el8.5.0+2609+b30d9eec | Jan 30, 2019 | In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections. |
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service
- affected < 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aafixed 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" w
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggere
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the cl
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.
- affected < 1:2.0.8-8.module_el8.5.0+2609+b30d9eecfixed 1:2.0.8-8.module_el8.5.0+2609+b30d9eec
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_http2) connections.
Page 4 of 4