Known vulnerabilities in httpd - page 2
Vendor:
Fedoraproject
Software:
httpd
Software CPE:
cpe:2.3:o:fedoraproject:httpd:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
89
Public exploits:
18
Known exploited (KEV):
4
Breakdown by Severity Chart
2.4.69-1.fc43
2.4.69-1.fc45
2.4.69-1.fc44
2.4.68-7.fc45
2.4.68-2.fc45
2.4.68-1.fc43
2.4.68-1.fc44
2.4.67-1.fc43
2.4.67-1.fc44
2.4.64-1.fc42
2.4.64-1.fc41
2.4.46-1.fc31
2.4.46-1.fc32
2.4.41-1.fc29
2.4.41-1.fc30
2.4.39-2.fc30
2.4.39-1.1.fc28
2.4.39-2.fc29
2.4.34-3.fc27
2.4.34-3.fc28
2.4.33-4.fc26
2.4.33-2.fc26
2.4.33-2.fc27
2.4.33-2.fc28
2.4.29-1.fc25
2.4.27-8.fc27
2.4.27-3.fc26
2.4.27-4.fc25
2.4.27-2.fc25
2.4.27-1.fc25
2.4.26-1.fc24
2.4.26-1.fc26
2.4.26-1.fc25
2.4.25-1.fc24
2.4.25-1.fc25
2.4.23-5.fc24
2.4.23-5.fc25
2.4.23-5.fc23
2.4.23-4.fc24
2.4.23-4.fc23
2.4.23-3.fc23
2.4.23-3.fc24
2.4.16-1.fc21
2.4.16-1.fc22
2.4.12-1.fc21
2.4.10-15.fc21
2.4.54-3.fc36
2.4.54-1.fc35
2.4.53-1.fc34
2.4.53-1.fc36
2.4.53-1.fc35
2.4.52-1.fc35
2.4.51-2.fc35
2.4.51-1.fc33
2.4.51-1.fc34
2.4.50-1.fc34
2.4.50-1.fc35
2.4.50-1.fc33
2.4.49-1.fc35
2.4.49-1.fc34
2.4.62-1.fc39
2.4.62-1.fc40
2.4.62-2.fc39
2.4.61-1.fc40
2.4.61-1.fc39
2.4.59-2.fc38
2.4.59-2.fc40
2.4.59-2.fc39
2.4.58-1.fc38
2.4.58-1.fc37
2.4.58-1.fc39
2.4.56-1.fc37
2.4.56-1.fc38
2.4.56-1.fc36
2.4.55-1.fc36
2.4.55-1.fc37
Vulnerabilities (89)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 2.4.61-1.fc39, 2.4.61-1.fc40 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 2.4.61-1.fc39, 2.4.61-1.fc40 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2024-24795 |
CWE-113 | Medium | 2.4.59-2.fc38, 2.4.59-2.fc39, 2.4.59-2.fc40 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 39 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 2.4.58-1.fc37, 2.4.58-1.fc38, 2.4.58-1.fc39 | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-25690 |
CWE-113 | Medium | 2.4.56-1.fc36, 2.4.56-1.fc37, 2.4.56-1.fc38 | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 54 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 2.4.56-1.fc36, 2.4.56-1.fc37, 2.4.56-1.fc38 | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 2.4.55-1.fc36, 2.4.55-1.fc37 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 2.4.55-1.fc36, 2.4.55-1.fc37 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 2.4.55-1.fc36, 2.4.55-1.fc37 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
||
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
||
| #VU64088 - Out-of-bounds read CVE-2022-30556 |
CWE-125 | Medium | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 31 more |
||
| #VU64086 - Resource exhaustion CVE-2022-30522 |
CWE-400 | Medium | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061723 and 31 more |
||
| #VU64085 - Improper input validation CVE-2022-29404 |
CWE-20 | Medium | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 30 more |
||
| #VU64083 - Out-of-bounds read CVE-2022-28615 |
CWE-125 | Low | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 41 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
||
| #VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377 |
CWE-444 | Medium | 2.4.54-1.fc35, 2.4.54-3.fc36 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 39 more |
||
| #VU61287 - Improper input validation CVE-2022-22719 |
CWE-20 | Medium | 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 32 more |
||
| #VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720 |
CWE-444 | Medium | 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 56 more |
||
| #VU61284 - Out-of-bounds write CVE-2022-23943 |
CWE-787 | High | 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 34 more |
||
| #VU59056 - Memory corruption CVE-2021-44790 |
CWE-119 | Critical | 2.4.52-1.fc35, 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 20.12.2021 |
SB2021122005 SB2021122021 SB2022010513 and 50 more |
Showing elements 21 - 40 out of 89