apache2 - security update

Fixed packages 1

Vulnerabilities 6

• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• Unscored —
  CVE-2018-17189 EPSS 19%

  In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the …

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jan 30, 2019
• Unscored —
  CVE-2018-17199 EPSS 20%

  In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the sess…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jan 30, 2019
• Unscored —
  CVE-2019-0196 EPSS 19%

  A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handli…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 11, 2019
• Unscored —
  CVE-2019-0217 Public exploit EPSS 16%

  In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019
• Unscored —
  CVE-2019-0220 EPSS 18%

  A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains mult…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 11, 2019