Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Apache HTTP Server — USN-3937-2 Clear all filters
TI-2018-01215 CVE-2018-1312 · GHSA-hvff-4fq3-p325

Improper authentication in Apache HTTP Server

Priority MEDIUM 58

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15785 Published 2018-03-26 Partial fix CWE-287
TI-2018-01204 CVE-2018-1301 · GHSA-c68v-mcv4-56hp

Memory corruption in Apache HTTP Server

Priority MEDIUM 42

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.14491 Published 2018-03-26 Partial fix CWE-119
TI-2017-11483 CVE-2017-15710 · GHSA-9q97-qm54-9797

Out-of-bounds write in Apache HTTP Server

Priority MEDIUM 50

In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.17534 Published 2018-03-26 Partial fix CWE-787