Unscored DSA-3796-1 3 CVEs

apache2 - security update

Published Feb 26, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	apache2	2.4.10-10+deb8u8

Vulnerabilities 3

Unscored —

CVE-2016-0736 Public exploit EPSS 49%

In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured …

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu

Jul 27, 2017
Unscored —

CVE-2016-2161 EPSS 21%

In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and e…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu

Jul 27, 2017
Unscored —

CVE-2016-8743 EPSS 13%

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests an…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu

Jul 27, 2017