mod_ssl | Snyk

Direct Vulnerabilities

Known vulnerabilities in the mod_ssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	<1:2.4.69-1.amzn2023.0.2
H Improper Privilege Management	<1:2.4.69-1.amzn2023.0.2
H Deployment of Wrong Handler	<1:2.4.69-1.amzn2023.0.2
H HTTP Request Smuggling	<1:2.4.69-1.amzn2023.0.2
H Incorrect Calculation of Buffer Size	<1:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Authentication Bypass	<1:2.4.69-1.amzn2023.0.2
H NULL Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Incorrect Implementation of Authentication Algorithm	<1:2.4.69-1.amzn2023.0.2
H Expired Pointer Dereference	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Improper Cross-boundary Removal of Sensitive Data	<1:2.4.69-1.amzn2023.0.2
H Integer Overflow or Wraparound	<1:2.4.69-1.amzn2023.0.2
H Server-Side Request Forgery (SSRF)	<1:2.4.69-1.amzn2023.0.2
H Out-of-bounds Write	<1:2.4.69-1.amzn2023.0.2
H Path Equivalence	<1:2.4.69-1.amzn2023.0.2
H Files or Directories Accessible to External Parties	<1:2.4.69-1.amzn2023.0.2
M Buffer Overflow	<1:2.4.68-1.amzn2023.0.1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1:2.4.68-1.amzn2023.0.1
M Buffer Underflow	<1:2.4.68-1.amzn2023.0.1
M Directory Traversal	<1:2.4.68-1.amzn2023.0.1
M Cross-site Scripting (XSS)	<1:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<1:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<1:2.4.68-1.amzn2023.0.1
M Incorrect Privilege Assignment	<1:2.4.68-1.amzn2023.0.1
M Buffer Overflow	<1:2.4.68-1.amzn2023.0.1
M Expired Pointer Dereference	<1:2.4.68-1.amzn2023.0.1
M Out-of-bounds Read	<1:2.4.68-1.amzn2023.0.1
H Improper Null Termination	<1:2.4.67-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<1:2.4.67-1.amzn2023.0.1
H External Control of File Name or Path	<1:2.4.67-1.amzn2023.0.1
H Buffer Over-read	<1:2.4.67-1.amzn2023.0.1
H Out-of-bounds Read	<1:2.4.67-1.amzn2023.0.1
H CRLF Injection	<1:2.4.67-1.amzn2023.0.1
H Information Exposure	<1:2.4.67-1.amzn2023.0.1
H NULL Pointer Dereference	<1:2.4.67-1.amzn2023.0.1
H Out-of-bounds Write	<1:2.4.67-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<1:2.4.66-1.amzn2023.0.1
H Information Exposure	<1:2.4.66-1.amzn2023.0.1
H Improper Neutralization	<1:2.4.66-1.amzn2023.0.1
M Incorrect Check of Function Return Value	<1:2.4.65-1.amzn2023.0.1
H Improper Access Control	<1:2.4.64-1.amzn2023.0.1
H Improper Output Neutralization for Logs	<1:2.4.64-1.amzn2023.0.1
H CRLF Injection	<1:2.4.64-1.amzn2023.0.1
H Memory Leak	<1:2.4.64-1.amzn2023.0.1
H HTTP Request Smuggling	<1:2.4.64-1.amzn2023.0.1
H Server-Side Request Forgery (SSRF)	<1:2.4.64-1.amzn2023.0.1
H Reachable Assertion	<1:2.4.64-1.amzn2023.0.1
H Exposure of Resource to Wrong Sphere	<1:2.4.62-1.amzn2023
H Improper Encoding or Escaping of Output	<1:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<1:2.4.61-1.amzn2023
H Improper Input Validation	<1:2.4.61-1.amzn2023
H Improper Encoding or Escaping of Output	<1:2.4.61-1.amzn2023
H Information Exposure	<1:2.4.61-1.amzn2023
H NULL Pointer Dereference	<1:2.4.61-1.amzn2023
H Inclusion of Functionality from Untrusted Control Sphere	<1:2.4.61-1.amzn2023
M HTTP Response Splitting	<1:2.4.59-2.amzn2023
M HTTP Request Smuggling	<1:2.4.59-2.amzn2023
H Resource Exhaustion	<1:2.4.58-1.amzn2023
H Out-of-bounds Read	<1:2.4.58-1.amzn2023
H Resource Exhaustion	<1:2.4.58-1.amzn2023
H HTTP Response Splitting	<1:2.4.56-1.amzn2023
H HTTP Response Splitting	<1:2.4.56-1.amzn2023
H HTTP Response Splitting	<1:2.4.55-1.amzn2023
H HTTP Request Smuggling	<1:2.4.55-1.amzn2023
H Out-of-bounds Write	<1:2.4.55-1.amzn2023
H HTTP Request Smuggling	<1:2.4.54-3.amzn2023.0.4
H Information Exposure	<1:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<1:2.4.54-3.amzn2023.0.4
H Allocation of Resources Without Limits or Throttling	<1:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<1:2.4.54-3.amzn2023.0.4
H Integer Overflow or Wraparound	<1:2.4.54-3.amzn2023.0.4
H Out-of-bounds Read	<1:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<1:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<1:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<1:2.4.54-3.amzn2023.0.4
H HTTP Request Smuggling	<1:2.4.54-3.amzn2023.0.4
H Use of Uninitialized Resource	<1:2.4.54-3.amzn2023.0.4
H Out-of-bounds Write	<1:2.4.54-3.amzn2023.0.4
H Server-Side Request Forgery (SSRF)	<1:2.4.54-3.amzn2023.0.4

Vulnerability

Vulnerable Version

Use After Free

<1:2.4.69-1.amzn2023.0.2