Unscored DLA-1748-1 2 CVEs

apache2 - security update

Published Apr 3, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	apache2	2.4.10-10+deb8u14

Vulnerabilities 2

Unscored —

CVE-2019-0217 Public exploit EPSS 16%

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…

Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Apr 8, 2019
Unscored —

CVE-2019-0220 EPSS 18%

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains mult…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Jun 11, 2019