Unscored DSA-4757-1 5 CVEs

apache2 - security update

Published Aug 31, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	apache2	2.4.38-3+deb10u4

Vulnerabilities 5

Unscored —

CVE-2020-11984 Public exploit Scanner template EPSS 90%

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

apache2 apache2 apache2 uwsgi Debian Ubuntu Alpine

Aug 7, 2020
Unscored —

CVE-2020-11993 EPSS 57%

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic …

apache2 apache2 apache2 Debian Ubuntu Alpine

Aug 7, 2020
Unscored —

CVE-2020-1927 EPSS 57%

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential …

Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Apr 1, 2020
Unscored —

CVE-2020-1934 EPSS 52%

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serv…

Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Apr 1, 2020
Unscored —

CVE-2020-9490 EPSS 89%

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 reque…

apache2 apache2 apache2 Debian Ubuntu Alpine

Aug 7, 2020