Known vulnerabilities in httpd - page 3
Vendor:
Fedoraproject
Software:
httpd
Software CPE:
cpe:2.3:o:fedoraproject:httpd:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
89
Public exploits:
18
Known exploited (KEV):
4
Breakdown by Severity Chart
2.4.69-1.fc43
2.4.69-1.fc45
2.4.69-1.fc44
2.4.68-7.fc45
2.4.68-2.fc45
2.4.68-1.fc43
2.4.68-1.fc44
2.4.67-1.fc43
2.4.67-1.fc44
2.4.64-1.fc42
2.4.64-1.fc41
2.4.46-1.fc31
2.4.46-1.fc32
2.4.41-1.fc29
2.4.41-1.fc30
2.4.39-2.fc30
2.4.39-1.1.fc28
2.4.39-2.fc29
2.4.34-3.fc27
2.4.34-3.fc28
2.4.33-4.fc26
2.4.33-2.fc26
2.4.33-2.fc27
2.4.33-2.fc28
2.4.29-1.fc25
2.4.27-8.fc27
2.4.27-3.fc26
2.4.27-4.fc25
2.4.27-2.fc25
2.4.27-1.fc25
2.4.26-1.fc24
2.4.26-1.fc26
2.4.26-1.fc25
2.4.25-1.fc24
2.4.25-1.fc25
2.4.23-5.fc24
2.4.23-5.fc25
2.4.23-5.fc23
2.4.23-4.fc24
2.4.23-4.fc23
2.4.23-3.fc23
2.4.23-3.fc24
2.4.16-1.fc21
2.4.16-1.fc22
2.4.12-1.fc21
2.4.10-15.fc21
2.4.54-3.fc36
2.4.54-1.fc35
2.4.53-1.fc34
2.4.53-1.fc36
2.4.53-1.fc35
2.4.52-1.fc35
2.4.51-2.fc35
2.4.51-1.fc33
2.4.51-1.fc34
2.4.50-1.fc34
2.4.50-1.fc35
2.4.50-1.fc33
2.4.49-1.fc35
2.4.49-1.fc34
2.4.62-1.fc39
2.4.62-1.fc40
2.4.62-2.fc39
2.4.61-1.fc40
2.4.61-1.fc39
2.4.59-2.fc38
2.4.59-2.fc40
2.4.59-2.fc39
2.4.58-1.fc38
2.4.58-1.fc37
2.4.58-1.fc39
2.4.56-1.fc37
2.4.56-1.fc38
2.4.56-1.fc36
2.4.55-1.fc36
2.4.55-1.fc37
Vulnerabilities (89)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61285 - Integer overflow CVE-2022-22721 |
CWE-190 | High | 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 39 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 2.4.52-1.fc35, 2.4.53-1.fc34, 2.4.53-1.fc35, 2.4.53-1.fc36 | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU57127 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-42013 |
CWE-78 | Critical | 2.4.50-1.fc33, 2.4.50-1.fc34, 2.4.50-1.fc35, 2.4.51-1.fc34, 2.4.51-2.fc35 | 07.10.2021 |
SB2021100718 SB2021100802 SB2021101513 and 8 more |
||
| #VU57063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-41773 |
CWE-22 | Critical | 2.4.50-1.fc33, 2.4.50-1.fc34, 2.4.50-1.fc35, 2.4.51-1.fc34, 2.4.51-2.fc35 | 05.10.2021 |
SB2021100514 SB2021100601 SB2021100802 and 8 more |
||
| #VU57062 - NULL Pointer Dereference CVE-2021-41524 |
CWE-476 | Medium | 2.4.50-1.fc33, 2.4.50-1.fc34, 2.4.50-1.fc35 | 05.10.2021 |
SB2021100514 SB2021100601 SB2021101513 and 5 more |
||
| #VU56681 - NULL Pointer Dereference CVE-2021-34798 |
CWE-476 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56680 - Out-of-bounds read CVE-2021-36160 |
CWE-125 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 22 more |
||
| #VU56679 - Memory corruption CVE-2021-39275 |
CWE-119 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438 |
CWE-918 | High | 2.4.49-1.fc34, 2.4.49-1.fc35 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 42 more |
||
| #VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33193 |
CWE-444 | Medium | 2.4.50-1.fc33, 2.4.50-1.fc34, 2.4.50-1.fc35 | 13.09.2021 |
SB2021091317 SB2021091707 SB2021092301 and 24 more |
||
| #VU53780 - Permissions, Privileges, and Access Controls CVE-2019-17567 |
CWE-264 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 10 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
||
| #VU53777 - NULL Pointer Dereference CVE-2021-26690 |
CWE-476 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 17 more |
||
| #VU53776 - NULL Pointer Dereference CVE-2021-26691 |
CWE-476 | Low | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 26 more |
||
| #VU53775 - Stack-based buffer overflow CVE-2020-35452 |
CWE-121 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 19 more |
||
| #VU53774 - Improper input validation CVE-2021-30641 |
CWE-20 | Medium | 2.4.49-1.fc34, 2.4.49-1.fc35 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 20 more |
||
| #VU35776 - Improper input validation CVE-2020-11985 |
CWE-20 | Medium | 2.4.46-1.fc31, 2.4.46-1.fc32 | 08.08.2020 |
SB2020080805 SB2020080807 SB2020090925 and 2 more |
||
| #VU35713 - Memory corruption CVE-2020-11984 |
CWE-119 | High | 2.4.46-1.fc31, 2.4.46-1.fc32 | 08.08.2020 |
SB2020080806 SB2020080807 SB2020082904 and 22 more |
||
| #VU26528 - Use of Uninitialized Variable CVE-2020-1934 |
CWE-457 | Medium | 2.4.46-1.fc31, 2.4.46-1.fc32 | 02.04.2020 |
SB2020040204 SB2020041511 SB2020050202 and 20 more |
||
| #VU26527 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-1927 |
CWE-601 | Medium | 2.4.46-1.fc31, 2.4.46-1.fc32 | 02.04.2020 |
SB2020040204 SB2020041511 SB2020050202 and 17 more |
Showing elements 41 - 60 out of 89