Skip to content
OpenAdvisories

Package · Alpine

apache2

148 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • High 7.5
    CVE-2024-27316 Public exploit EPSS 89%

    Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames

    HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response. If a client does not stop sending headers, this leads to memory exhaustion.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • High 7.3
    CVE-2023-38709 Public exploit

    Apache HTTP Server: HTTP response splitting

    Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • High 7.5
    CVE-2023-27522

    Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting

    HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2021-41773 Exploited · Ransomware Public exploit EPSS 100%

    Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49

    A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
    KEV Nov 3, 2021
  • High 7.5
    CVE-2019-9517 EPSS 27%

    Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

    Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer…

    apache2 apache2 apache2 nodejs Debian Ubuntu Alpine
  • High 7.8
    CVE-2019-0211 Exploited Public exploit EPSS 65%

    In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

    Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV Nov 3, 2021