Skip to content
OpenAdvisories
Unscored DSA-3325-1 2 CVEs

apache2 - security update

Published Aug 1, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 apache2 2.2.22-13+deb7u5
Debian · 8 apache2 2.4.10-10+deb8u1

Vulnerabilities 2

  • Unscored —
    CVE-2015-3183 EPSS 74%

    The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk header…

  • Unscored —
    CVE-2015-3185 EPSS 16%

    The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider …