Unscored DLA-1647-1 1 CVE

apache2 - security update

Published Jan 29, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	apache2	2.4.10-10+deb8u13

Vulnerabilities 1

Unscored —

CVE-2018-17199 EPSS 20%

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the sess…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Jan 30, 2019