Skip to content
OpenAdvisories
Unscored DLA-66-1 4 CVEs

apache2 - security update

Published Sep 29, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 apache2 2.2.16-6+squeeze13

Vulnerabilities 4

  • Unscored —
    CVE-2013-6438 EPSS 27%

    The dav_xml_get_cdata function in main/util.c in the mod_dav module in the Apache HTTP Server before 2.4.8 does not pro…

  • Unscored —
    CVE-2014-0118 EPSS 37%

    The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when…

  • Unscored —
    CVE-2014-0226 Public exploit EPSS 86%

    Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2014-0231 EPSS 45%

    The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote atta…