Known vulnerabilities in apache2 (Debian package) 2.4.10-10+deb8u13

Vendor: Debian
Version: 2.4.10-10+deb8u13
Software CPE: cpe:2.3:o:debian:apache2_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 17
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting apache2 (Debian package) version 2.4.10-10+deb8u13 apache2 (Debian package) 2.4.10-10+deb8u13 is affected by 17 vulnerabilities: 1 critical, 1 high, 10 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224
CWE-918 Medium
No
No
2.4.38-3+deb10u7, 2.4.52-1~deb11u2 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790
CWE-119 Critical
Public exploit available
No
2.4.38-3+deb10u7, 2.4.52-1~deb11u2 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798
CWE-476 Medium
No
No
2.4.38-3+deb10u6, 2.4.51-1~deb11u1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160
CWE-125 Medium
No
No
2.4.38-3+deb10u6, 2.4.51-1~deb11u1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275
CWE-119 Medium
No
No
2.4.38-3+deb10u6, 2.4.51-1~deb11u1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438
CWE-918 High
Public exploit available
Exploited
2.4.38-3+deb10u6, 2.4.51-1~deb11u1 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU53777 - NULL Pointer Dereference
CVE-2021-26690
CWE-476 Medium
No
No
2.4.38-3+deb10u5 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 17 more
#VU53776 - NULL Pointer Dereference
CVE-2021-26691
CWE-476 Low
No
No
2.4.38-3+deb10u5 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 26 more
#VU53775 - Stack-based buffer overflow
CVE-2020-35452
CWE-121 Medium
No
No
2.4.38-3+deb10u5 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 19 more
#VU53774 - Improper input validation
CVE-2021-30641
CWE-20 Medium
No
No
2.4.38-3+deb10u5 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53773 - NULL Pointer Dereference
CVE-2021-31618
CWE-476 Medium
No
No
2.4.38-3+deb10u5 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU18113 - Improper input validation
CVE-2019-0220
CWE-20 Low
No
No
2.4.25-3+deb9u7 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18111 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-0217
CWE-362 Low
No
No
2.4.25-3+deb9u7 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211
CWE-264 Low
Public exploit available
Exploited
2.4.25-3+deb9u7 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU18109 - Use After Free
CVE-2019-0196
CWE-416 Medium
No
No
2.4.25-3+deb9u7 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU17178 - Improper Access Control
CVE-2018-17199
CWE-284 Low
No
No
2.4.25-3+deb9u7 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17177 - Improper input validation
CVE-2018-17189
CWE-20 Medium
No
No
2.4.25-3+deb9u7 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more