Unscored DSA-2405-1 6 CVEs

apache2 - multiple issues

Published Feb 6, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	apache2	2.2.9-10+lenny12
Debian · 6.0	apache2	2.2.16-6+squeeze6

Vulnerabilities 6

Unscored —

CVE-2011-3368 Public exploit EPSS 91%

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

apache2 Debian

Oct 5, 2011
Unscored —

CVE-2011-3607 Public exploit

Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…

apache2 Debian

Nov 8, 2011
Unscored —

CVE-2011-3639 Public exploit EPSS 50%

The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 …

apache2 Debian

Nov 30, 2011
Unscored —

CVE-2011-4317 Public exploit EPSS 60%

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, wh…

apache2 Debian

Nov 30, 2011
Unscored —

CVE-2012-0031 Public exploit

scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …

apache2 Debian

Jan 18, 2012
Unscored —

CVE-2012-0053 Public exploit EPSS 82%

protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…

apache2 Debian

Jan 28, 2012