TI-2020-09644 CVE-2020-11984 · GHSA-7fcg-7xhc-3997
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Priority CRITICAL 85
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
RHSA-2021:1809
httpd:2.4 security, bug fix, and enhancement update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb.aarch64::httpd:2.4, httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb.ppc64le::httpd:2.4, httpd-2.4.37-39.module+el8.4.0+9658+b87b2deb.s390x::httpd:2.4 +38
Fixes 3 records
TI-2020-09652 CVE-2020-11993 · GHSA-89mq-r3q6-9q3q
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2…
Priority HIGH 66
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory…
TI-2018-12298 CVE-2018-17199 · GHSA-gxfm-3qhv-h52c
Session fixation in Apache HTTP Server
Priority MEDIUM 51
In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session.