httpd | Snyk

Direct Vulnerabilities

Known vulnerabilities in the httpd package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	<0:2.4.69-1.amzn2023.0.2
H Incorrect Calculation of Buffer Size	<0:2.4.69-1.amzn2023.0.2
H Incorrect Implementation of Authentication Algorithm	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H Deployment of Wrong Handler	<0:2.4.69-1.amzn2023.0.2
H Improper Cross-boundary Removal of Sensitive Data	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<0:2.4.69-1.amzn2023.0.2
H Files or Directories Accessible to External Parties	<0:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
H Expired Pointer Dereference	<0:2.4.69-1.amzn2023.0.2
H Server-Side Request Forgery (SSRF)	<0:2.4.69-1.amzn2023.0.2
H Improper Privilege Management	<0:2.4.69-1.amzn2023.0.2
H Authentication Bypass	<0:2.4.69-1.amzn2023.0.2
H HTTP Request Smuggling	<0:2.4.69-1.amzn2023.0.2
H Integer Overflow or Wraparound	<0:2.4.69-1.amzn2023.0.2
H Path Equivalence	<0:2.4.69-1.amzn2023.0.2
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Cross-site Scripting (XSS)	<0:2.4.68-1.amzn2023.0.1
M Buffer Underflow	<0:2.4.68-1.amzn2023.0.1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Incorrect Privilege Assignment	<0:2.4.68-1.amzn2023.0.1
M Directory Traversal	<0:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<0:2.4.68-1.amzn2023.0.1
M Expired Pointer Dereference	<0:2.4.68-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<0:2.4.67-1.amzn2023.0.1
H Improper Null Termination	<0:2.4.67-1.amzn2023.0.1
H Buffer Over-read	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Read	<0:2.4.67-1.amzn2023.0.1
H External Control of File Name or Path	<0:2.4.67-1.amzn2023.0.1
H CRLF Injection	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.67-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<0:2.4.67-1.amzn2023.0.1
H Out-of-bounds Write	<0:2.4.67-1.amzn2023.0.1
H Information Exposure	<0:2.4.66-1.amzn2023.0.1
H Improper Neutralization	<0:2.4.66-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<0:2.4.66-1.amzn2023.0.1
M Incorrect Check of Function Return Value	<0:2.4.65-1.amzn2023.0.1
H HTTP Request Smuggling	<0:2.4.64-1.amzn2023.0.1
H Reachable Assertion	<0:2.4.64-1.amzn2023.0.1
H Improper Access Control	<0:2.4.64-1.amzn2023.0.1
H Server-Side Request Forgery (SSRF)	<0:2.4.64-1.amzn2023.0.1
H Improper Output Neutralization for Logs	<0:2.4.64-1.amzn2023.0.1
H Memory Leak	<0:2.4.64-1.amzn2023.0.1
H CRLF Injection	<0:2.4.64-1.amzn2023.0.1
H Exposure of Resource to Wrong Sphere	<0:2.4.62-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
H Information Exposure	<0:2.4.61-1.amzn2023
H NULL Pointer Dereference	<0:2.4.61-1.amzn2023
H Improper Input Validation	<0:2.4.61-1.amzn2023
H Inclusion of Functionality from Untrusted Control Sphere	<0:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<0:2.4.61-1.amzn2023
M HTTP Response Splitting	<0:2.4.59-2.amzn2023
M HTTP Request Smuggling	<0:2.4.59-2.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Resource Exhaustion	<0:2.4.58-1.amzn2023
H Out-of-bounds Read	<0:2.4.58-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.56-1.amzn2023
H HTTP Response Splitting	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.55-1.amzn2023
H Out-of-bounds Write	<0:2.4.55-1.amzn2023
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Information Exposure	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Read	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<0:2.4.54-3.amzn2023.0.4
H Use of Uninitialized Resource	<0:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<0:2.4.54-3.amzn2023.0.4
H Server-Side Request Forgery (SSRF)	<0:2.4.54-3.amzn2023.0.4

Vulnerability

Vulnerable Version

Use After Free

<0:2.4.69-1.amzn2023.0.2