mod_proxy_html

Direct Vulnerabilities

Known vulnerabilities in the mod_proxy_html package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Integer Overflow or Wraparound

<1:2.4.69-1.amzn2.0.3
  • H
Out-of-bounds Write

<1:2.4.69-1.amzn2.0.3
  • H
Out-of-bounds Write

<1:2.4.69-1.amzn2.0.3
  • H
Out-of-bounds Write

<1:2.4.69-1.amzn2.0.3
  • H
Improper Cross-boundary Removal of Sensitive Data

<1:2.4.69-1.amzn2.0.3
  • H
Use After Free

<1:2.4.69-1.amzn2.0.3
  • H
NULL Pointer Dereference

<1:2.4.69-1.amzn2.0.3
  • H
NULL Pointer Dereference

<1:2.4.69-1.amzn2.0.3
  • H
Path Equivalence

<1:2.4.69-1.amzn2.0.3
  • H
Authentication Bypass

<1:2.4.69-1.amzn2.0.3
  • H
Server-Side Request Forgery (SSRF)

<1:2.4.69-1.amzn2.0.3
  • H
Incorrect Implementation of Authentication Algorithm

<1:2.4.69-1.amzn2.0.3
  • H
Incorrect Calculation of Buffer Size

<1:2.4.69-1.amzn2.0.3
  • H
HTTP Request Smuggling

<1:2.4.69-1.amzn2.0.3
  • H
Improper Privilege Management

<1:2.4.69-1.amzn2.0.3
  • H
Deployment of Wrong Handler

<1:2.4.69-1.amzn2.0.3
  • H
Expired Pointer Dereference

<1:2.4.69-1.amzn2.0.3
  • H
Files or Directories Accessible to External Parties

<1:2.4.69-1.amzn2.0.3
  • M
Out-of-bounds Read

<1:2.4.68-1.amzn2.0.1
  • M
Buffer Underflow

<1:2.4.68-1.amzn2.0.1
  • M
Buffer Overflow

<1:2.4.68-1.amzn2.0.1
  • M
Directory Traversal

<1:2.4.68-1.amzn2.0.1
  • M
Buffer Overflow

<1:2.4.68-1.amzn2.0.1
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<1:2.4.68-1.amzn2.0.1
  • M
Incorrect Privilege Assignment

<1:2.4.68-1.amzn2.0.1
  • M
Out-of-bounds Read

<1:2.4.68-1.amzn2.0.1
  • M
Buffer Overflow

<1:2.4.68-1.amzn2.0.1
  • M
Cross-site Scripting (XSS)

<1:2.4.68-1.amzn2.0.1
  • M
Expired Pointer Dereference

<1:2.4.68-1.amzn2.0.1
  • H
Improper Null Termination

<1:2.4.67-1.amzn2.0.1
  • H
CRLF Injection

<1:2.4.67-1.amzn2.0.1
  • H
Information Exposure

<1:2.4.67-1.amzn2.0.1
  • H
Out-of-bounds Write

<1:2.4.67-1.amzn2.0.1
  • H
Out-of-bounds Read

<1:2.4.67-1.amzn2.0.1
  • H
Buffer Over-read

<1:2.4.67-1.amzn2.0.1
  • H
NULL Pointer Dereference

<1:2.4.67-1.amzn2.0.1
  • H
NULL Pointer Dereference

<1:2.4.67-1.amzn2.0.1
  • H
Allocation of Resources Without Limits or Throttling

<1:2.4.67-1.amzn2.0.1
  • H
External Control of File Name or Path

<1:2.4.67-1.amzn2.0.1
  • H
Information Exposure

<1:2.4.66-1.amzn2.0.1
  • H
Authentication Bypass by Primary Weakness

<1:2.4.66-1.amzn2.0.1
  • H
Improper Neutralization

<1:2.4.66-1.amzn2.0.1
  • H
Integer Overflow or Wraparound

<1:2.4.66-1.amzn2.0.1
  • M
Incorrect Check of Function Return Value

<1:2.4.65-1.amzn2.0.2
  • H
Reachable Assertion

<1:2.4.64-1.amzn2.0.1
  • H
Improper Access Control

<1:2.4.64-1.amzn2.0.1
  • H
HTTP Request Smuggling

<1:2.4.64-1.amzn2.0.1
  • H
Improper Output Neutralization for Logs

<1:2.4.64-1.amzn2.0.1
  • H
Memory Leak

<1:2.4.64-1.amzn2.0.1
  • H
Server-Side Request Forgery (SSRF)

<1:2.4.64-1.amzn2.0.1
  • H
CRLF Injection

<1:2.4.64-1.amzn2.0.1
  • H
Exposure of Resource to Wrong Sphere

<1:2.4.62-1.amzn2.0.1
  • H
Information Exposure

<1:2.4.61-1.amzn2.0.1
  • H
Improper Encoding or Escaping of Output

<1:2.4.61-1.amzn2.0.1
  • H
Improper Encoding or Escaping of Output

<1:2.4.61-1.amzn2.0.1
  • H
NULL Pointer Dereference

<1:2.4.61-1.amzn2.0.1
  • H
Inclusion of Functionality from Untrusted Control Sphere

<1:2.4.61-1.amzn2.0.1
  • H
Improper Input Validation

<1:2.4.61-1.amzn2.0.1
  • H
Improper Encoding or Escaping of Output

<1:2.4.61-1.amzn2.0.1
  • M
HTTP Response Splitting

<1:2.4.59-1.amzn2
  • M
HTTP Request Smuggling

<1:2.4.59-1.amzn2
  • H
Resource Exhaustion

<1:2.4.58-1.amzn2
  • H
Resource Exhaustion

<1:2.4.58-1.amzn2
  • H
Out-of-bounds Read

<1:2.4.58-1.amzn2
  • H
HTTP Response Splitting

<1:2.4.56-1.amzn2
  • H
HTTP Response Splitting

<1:2.4.56-1.amzn2
  • H
HTTP Response Splitting

<1:2.4.55-1.amzn2
  • H
HTTP Request Smuggling

<1:2.4.55-1.amzn2
  • H
Out-of-bounds Write

<1:2.4.55-1.amzn2
  • M
Allocation of Resources Without Limits or Throttling

<1:2.4.54-1.amzn2
  • M
HTTP Request Smuggling

<1:2.4.54-1.amzn2
  • M
Integer Overflow or Wraparound

<1:2.4.54-1.amzn2
  • M
Allocation of Resources Without Limits or Throttling

<1:2.4.54-1.amzn2
  • M
Information Exposure

<1:2.4.54-1.amzn2
  • M
Out-of-bounds Read

<1:2.4.54-1.amzn2
  • M
Integer Overflow or Wraparound

<1:2.4.54-1.amzn2
  • M
HTTP Request Smuggling

<1:2.4.54-1.amzn2
  • H
Out-of-bounds Write

<1:2.4.53-1.amzn2
  • H
Out-of-bounds Write

<1:2.4.53-1.amzn2
  • H
HTTP Request Smuggling

<1:2.4.53-1.amzn2
  • H
Use of Uninitialized Resource

<1:2.4.53-1.amzn2
  • H
Server-Side Request Forgery (SSRF)

<1:2.4.52-1.amzn2
  • H
Out-of-bounds Write

<1:2.4.52-1.amzn2
  • H
Directory Traversal

<1:2.4.51-1.amzn2
  • H
Directory Traversal

<1:2.4.51-1.amzn2
  • H
NULL Pointer Dereference

<1:2.4.51-1.amzn2
  • H
Server-Side Request Forgery (SSRF)

<1:2.4.51-1.amzn2
  • H
Buffer Overflow

<1:2.4.51-1.amzn2
  • H
CVE-2021-33193

<1:2.4.51-1.amzn2
  • H
NULL Pointer Dereference

<1:2.4.51-1.amzn2
  • H
Out-of-bounds Read

<1:2.4.51-1.amzn2
  • M
CVE-2021-30641

<1:2.4.48-2.amzn2
  • M
Out-of-bounds Write

<1:2.4.48-2.amzn2
  • M
NULL Pointer Dereference

<1:2.4.48-2.amzn2
  • M
NULL Pointer Dereference

<1:2.4.48-2.amzn2
  • M
HTTP Request Smuggling

<1:2.4.48-2.amzn2
  • M
Missing Authorization

<1:2.4.48-2.amzn2
  • M
Out-of-bounds Write

<1:2.4.48-2.amzn2
  • H
NULL Pointer Dereference

<1:2.4.46-2.amzn2
  • H
HTTP Request Smuggling

<1:2.4.46-1.amzn2
  • H
HTTP Request Smuggling

<1:2.4.46-1.amzn2
  • H
Buffer Overflow

<1:2.4.46-1.amzn2
  • L
Use of Uninitialized Resource

<1:2.4.43-1.amzn2
  • L
Open Redirect

<1:2.4.43-1.amzn2
  • M
Open Redirect

<1:2.4.41-1.amzn2.0.1
  • M
Cross-site Scripting (XSS)

<1:2.4.41-1.amzn2.0.1
  • M
Out-of-bounds Write

<1:2.4.41-1.amzn2.0.1
  • H
Race Condition

<1:2.4.39-1.amzn2.0.1
  • H
Use of Incorrectly-Resolved Name or Reference

<1:2.4.39-1.amzn2.0.1
  • H
CVE-2019-0215

<1:2.4.39-1.amzn2.0.1
  • H
HTTP Request Smuggling

<1:2.4.39-1.amzn2.0.1
  • H
Use After Free

<1:2.4.39-1.amzn2.0.1
  • H
Use After Free

<1:2.4.39-1.amzn2.0.1
  • M
CVE-2018-11763

<1:2.4.37-1.amzn2.0.1
  • M
NULL Pointer Dereference

<1:2.4.34-1.amzn2.1.0