Skip to content
OpenAdvisories
Unscored DLA-71-1 2 CVEs

apache2 - security update

Published Oct 16, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 apache2 2.2.16-6+squeeze14

Vulnerabilities 2

  • Unscored —
    CVE-2013-5704 EPSS 58%

    The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directi…

  • Unscored —
    CVE-2014-3581 EPSS 13%

    The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server be…