Known vulnerabilities in apache2 (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:apache2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 96
Public exploits: 16
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache2 (Ubuntu package) apache2 (Ubuntu package) is affected by 96 known vulnerabilities: 2 critical, 13 high, 61 medium, 20 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129540 - Out-of-bounds read
CVE-2026-34059
CWE-125 Medium
No
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 27 more
#VU129546 - NULL Pointer Dereference
CVE-2026-29169
CWE-476 Medium
No
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 16 more
#VU129547 - Allocation of Resources Without Limits or Throttling
CVE-2026-29168
CWE-770 Medium
No
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB2026051103
and 17 more
#VU129548 - Heap-based Buffer Overflow
CVE-2026-28780
CWE-122 High
No
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB2026051101
and 27 more
#VU129549 - Improper Access Control
CVE-2026-24072
CWE-284 Low
No
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 20 more
#VU129550 - Double Free
CVE-2026-23918
CWE-415 High
Available
No
2.4.52-1ubuntu4.20, 2.4.58-1ubuntu8.12, 2.4.64-1ubuntu3.4, 2.4.66-2ubuntu2.1 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU119150 - Integer overflow
CVE-2025-55753
CWE-190 Low
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.18, 2.4.52-1ubuntu4.19, 2.4.58-1ubuntu8.10, 2.4.58-1ubuntu8.11, 2.4.64-1ubuntu3.2, 2.4.64-1ubuntu3.3 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 32 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098
CWE-97 Low
Available
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.18, 2.4.52-1ubuntu4.19, 2.4.58-1ubuntu8.10, 2.4.58-1ubuntu8.11, 2.4.64-1ubuntu3.2, 2.4.64-1ubuntu3.3 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082
CWE-74 Low
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.18, 2.4.52-1ubuntu4.19, 2.4.58-1ubuntu8.10, 2.4.58-1ubuntu8.11, 2.4.64-1ubuntu3.2, 2.4.64-1ubuntu3.3 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm16, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm6, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm2, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.15, 2.4.58-1ubuntu8.7, 2.4.63-1ubuntu1.1 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 37 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm16, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm6, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm2, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.15, 2.4.58-1ubuntu8.7, 2.4.63-1ubuntu1.1 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 29 more
#VU112731 - Improper Encoding or Escaping of Output
CVE-2024-47252
CWE-116 High
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm16, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm6, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm2, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.15, 2.4.58-1ubuntu8.7, 2.4.63-1ubuntu1.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU112729 - Resource Management Errors
CVE-2025-49630
CWE-399 Medium
No
No
2.4.18-2ubuntu3.17+esm16, 2.4.29-1ubuntu4.27+esm6, 2.4.41-4ubuntu3.23+esm2, 2.4.52-1ubuntu4.15, 2.4.58-1ubuntu8.7, 2.4.63-1ubuntu1.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 27 more
#VU112728 - Cryptographic Issues
CVE-2025-49812
CWE-310 Medium
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm16, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm6, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.23+esm2, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.15, 2.4.58-1ubuntu8.7, 2.4.63-1ubuntu1.1 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Available
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.17, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.9, 2.4.57-2ubuntu2.4, 2.4.58-1ubuntu8.1 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU82245 - Resource Management Errors
CVE-2023-45802
CWE-399 Medium
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.15, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.7, 2.4.55-1ubuntu2.1, 2.4.57-2ubuntu2.1 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 37 more


Showing elements 21 - 40 out of 96