Known vulnerabilities in apache2 (Ubuntu package) - page 3

Software CPE: cpe:2.3:o:canonical:apache2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 96
Public exploits: 16
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache2 (Ubuntu package) apache2 (Ubuntu package) is affected by 96 known vulnerabilities: 2 critical, 13 high, 61 medium, 20 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Available
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm10, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Available
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387
CWE-476 Medium
No
No
2.4.41-4ubuntu3.19, 2.4.41-4ubuntu3.20, 2.4.52-1ubuntu4.10, 2.4.52-1ubuntu4.11, 2.4.57-2ubuntu2.5, 2.4.58-1ubuntu8.2, 2.4.58-1ubuntu8.3 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
Ubuntu Pro, 2.4.41-4ubuntu3.17, 2.4.52-1ubuntu4.9, 2.4.57-2ubuntu2.4, 2.4.58-1ubuntu8.1 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795
CWE-113 Medium
No
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.17, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.9, 2.4.57-2ubuntu2.4, 2.4.58-1ubuntu8.1 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
Ubuntu Pro, 2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.17, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.9, 2.4.57-2ubuntu2.4, 2.4.58-1ubuntu8.1 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 63 more
#VU82248 - Out-of-bounds read
CVE-2023-31122
CWE-125 Medium
No
No
Ubuntu Pro, 2.4.41-4ubuntu3.15, 2.4.52-1ubuntu4.7, 2.4.55-1ubuntu2.1, 2.4.57-2ubuntu2.1 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 43 more
#VU82247 - Resource Management Errors
CVE-2023-43622
CWE-399 Medium
Available
No
2.4.41-4ubuntu3.15, 2.4.52-1ubuntu4.7, 2.4.55-1ubuntu2.1, 2.4.57-2ubuntu2.1 19.10.2023 SB2023101942
SB2023101960
SB2023102647
and 11 more
#VU82245 - Resource Management Errors
CVE-2023-45802
CWE-399 Medium
No
No
2.4.7-1ubuntu4.22+esm12, 2.4.18-2ubuntu3.17+esm17, 2.4.29-1ubuntu4.27+esm7, 2.4.29-1ubuntu4.27+esm8, 2.4.41-4ubuntu3.15, 2.4.41-4ubuntu3.23+esm3, 2.4.52-1ubuntu4.7, 2.4.55-1ubuntu2.1, 2.4.57-2ubuntu2.1 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 37 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Available
No
Ubuntu Pro, 2.4.29-1ubuntu4.27, 2.4.41-4ubuntu3.14, 2.4.52-1ubuntu4.4, 2.4.54-2ubuntu1.2 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522
CWE-113 Medium
No
No
2.4.29-1ubuntu4.27, 2.4.41-4ubuntu3.14, 2.4.52-1ubuntu4.4, 2.4.54-2ubuntu1.2 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
Ubuntu Pro, 2.4.29-1ubuntu4.26, 2.4.41-4ubuntu3.13, 2.4.52-1ubuntu4.3, 2.4.54-2ubuntu1.1 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
Ubuntu Pro, 2.4.29-1ubuntu4.26, 2.4.41-4ubuntu3.13, 2.4.52-1ubuntu4.3, 2.4.54-2ubuntu1.1 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
Ubuntu Pro, 2.4.29-1ubuntu4.26, 2.4.41-4ubuntu3.13, 2.4.52-1ubuntu4.3, 2.4.54-2ubuntu1.1 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU64088 - Out-of-bounds read
CVE-2022-30556
CWE-125 Medium
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404
CWE-20 Medium
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615
CWE-125 Low
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614
CWE-125 Low
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377
CWE-444 Medium
Available
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more


Showing elements 41 - 60 out of 96