Known vulnerabilities in apache2 (Ubuntu package) - page 4

Software CPE: cpe:2.3:o:canonical:apache2_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 96
Public exploits: 16
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache2 (Ubuntu package) apache2 (Ubuntu package) is affected by 96 known vulnerabilities: 2 critical, 13 high, 61 medium, 20 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64089 - Improper Authentication
CVE-2022-31813
CWE-287 Medium
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64086 - Resource exhaustion
CVE-2022-30522
CWE-400 Medium
No
No
2.4.29-1ubuntu4.24, 2.4.29-1ubuntu4.25, 2.4.41-4ubuntu3.12, 2.4.48-3.1ubuntu3.5, 2.4.52-1ubuntu4.1, 2.4.71ubuntu4.22+esm6 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU61287 - Improper input validation
CVE-2022-22719
CWE-20 Medium
No
No
2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721
CWE-190 High
No
No
2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943
CWE-787 High
No
No
2.4.29-1ubuntu4.22, 2.4.41-4ubuntu3.10, 2.4.48-3.1ubuntu3.3, 2.4.182ubuntu3.17+esm5 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224
CWE-918 Medium
No
No
2.4.29-1ubuntu4.21, 2.4.41-4ubuntu3.9, 2.4.46-4ubuntu1.5, 2.4.48-3.1ubuntu3.2, 2.4.182ubuntu3.17+esm4 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790
CWE-119 Critical
Available
No
2.4.29-1ubuntu4.21, 2.4.41-4ubuntu3.9, 2.4.46-4ubuntu1.5, 2.4.48-3.1ubuntu3.2, 2.4.182ubuntu3.17+esm4 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798
CWE-476 Medium
No
No
2.4.29-1ubuntu4.17, 2.4.29-1ubuntu4.18, 2.4.41-4ubuntu3.5, 2.4.41-4ubuntu3.6, 2.4.46-4ubuntu1.2, 2.4.46-4ubuntu1.3, 2.4.182ubuntu3.17+esm2, 2.4.182ubuntu3.17+esm3 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160
CWE-125 Medium
No
No
2.4.29-1ubuntu4.17, 2.4.29-1ubuntu4.18, 2.4.41-4ubuntu3.5, 2.4.41-4ubuntu3.6, 2.4.46-4ubuntu1.2, 2.4.46-4ubuntu1.3, 2.4.182ubuntu3.17+esm3 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275
CWE-119 Medium
No
No
2.4.29-1ubuntu4.17, 2.4.29-1ubuntu4.18, 2.4.41-4ubuntu3.5, 2.4.41-4ubuntu3.6, 2.4.46-4ubuntu1.2, 2.4.46-4ubuntu1.3, 2.4.182ubuntu3.17+esm2, 2.4.182ubuntu3.17+esm3 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438
CWE-918 High
Available
Exploited
2.4.29-1ubuntu4.17, 2.4.29-1ubuntu4.18, 2.4.41-4ubuntu3.5, 2.4.41-4ubuntu3.6, 2.4.46-4ubuntu1.2, 2.4.46-4ubuntu1.3, 2.4.182ubuntu3.17+esm2, 2.4.182ubuntu3.17+esm3 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193
CWE-444 Medium
No
No
2.4.29-1ubuntu4.17, 2.4.29-1ubuntu4.18, 2.4.41-4ubuntu3.5, 2.4.41-4ubuntu3.6, 2.4.46-4ubuntu1.2, 2.4.46-4ubuntu1.3, 2.4.182ubuntu3.17+esm3 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU53778 - NULL Pointer Dereference
CVE-2020-13950
CWE-476 Medium
No
No
2.4.29-1ubuntu4.16, 2.4.41-4ubuntu3.3, 2.4.46-1ubuntu1.2, 2.4.46-4ubuntu1.1 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 15 more
#VU53777 - NULL Pointer Dereference
CVE-2021-26690
CWE-476 Medium
No
No
2.4.29-1ubuntu4.16, 2.4.41-4ubuntu3.3, 2.4.46-1ubuntu1.2, 2.4.46-4ubuntu1.1, 2.4.182ubuntu3.17+esm1 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 17 more
#VU53776 - NULL Pointer Dereference
CVE-2021-26691
CWE-476 Low
No
No
2.4.29-1ubuntu4.16, 2.4.41-4ubuntu3.3, 2.4.46-1ubuntu1.2, 2.4.46-4ubuntu1.1, 2.4.182ubuntu3.17+esm1 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 26 more
#VU53775 - Stack-based buffer overflow
CVE-2020-35452
CWE-121 Medium
No
No
2.4.29-1ubuntu4.16, 2.4.41-4ubuntu3.3, 2.4.46-1ubuntu1.2, 2.4.46-4ubuntu1.1, 2.4.182ubuntu3.17+esm1 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 19 more
#VU53774 - Improper input validation
CVE-2021-30641
CWE-20 Medium
No
No
2.4.29-1ubuntu4.16, 2.4.41-4ubuntu3.3, 2.4.46-1ubuntu1.2, 2.4.46-4ubuntu1.1, 2.4.182ubuntu3.17+esm1 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934
CWE-457 Medium
No
No
2.4.18-2ubuntu3.17, 2.4.29-1ubuntu4.14, 2.4.41-4ubuntu3.19 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927
CWE-601 Medium
No
No
2.4.18-2ubuntu3.17, 2.4.29-1ubuntu4.14, 2.4.41-4ubuntu3.19 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more


Showing elements 61 - 80 out of 96