Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Apache HTTP Server — FEDORA-2019-a4ed7400f4 Clear all filters
TI-2019-00184 CVE-2019-0211 · GHSA-w9rc-q752-88hf

Use after free in Apache HTTP Server

Priority CRITICAL 93KEV

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) cou…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.65005 Published 2019-04-08 Partial fix CWE-416
TI-2019-00190 CVE-2019-0217 · GHSA-q29r-xr2f-g7j5

Race condition in Apache HTTP Server

Priority MEDIUM 49

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing config…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.16355 Published 2019-04-08 Partial fix CWE-362