Homepage

apache2

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the apache2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
TEMP-0535886-8B62DC

<2.2.9-1
  • L
Integer Overflow or Wraparound

<2.4.68-1~deb13u1+e2
  • L
Path Equivalence

<2.4.68-1~deb13u1+e2
  • L
Use After Free

<2.4.68-1~deb13u1+e4
  • L
Authentication Bypass

<2.4.68-1~deb13u1+e4
  • L
HTTP Request Smuggling

<2.4.68-1~deb13u1+e2
  • L
NULL Pointer Dereference

<2.4.68-1~deb13u1+e2
  • L
Stack-based Buffer Overflow

<2.4.68-1~deb13u1+e2
  • L
Improper Access Control

<2.4.68-1~deb13u1+e2
  • L
Improper Privilege Management

<2.4.68-1~deb13u1+e2
  • L
Files or Directories Accessible to External Parties

<2.4.68-1~deb13u1+e2
  • L
Use After Free

<2.4.68-1~deb13u1+e2
  • L
Out-of-bounds Write

<2.4.68-1~deb13u1+e2
  • L
Use After Free

<2.4.68-1~deb13u1+e2
  • L
Out-of-bounds Write

<2.4.68-1~deb13u1+e2
  • L
Uncontrolled Memory Allocation

<2.4.67-1~deb11u2
  • L
Use After Free

<2.4.67-1~deb11u3
  • L
Missing Authentication for Critical Function

<2.4.68-1~deb13u1+e4
  • L
Information Exposure

<2.4.68-1~deb13u1+e2
  • L
NULL Pointer Dereference

<2.4.68-1~deb13u1+e2
  • L
Buffer Underflow

<2.4.67-1~deb11u3
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.4.67-1~deb11u3
  • L
Buffer Over-read

<2.4.67-1~deb11u3
  • L
Improper Privilege Management

<2.4.67-1~deb11u3
  • L
Out-of-bounds Read

<2.4.67-1~deb11u3
  • L
Heap-based Buffer Overflow

<2.4.67-1~deb11u3
  • L
Exposure of Resource to Wrong Sphere

<2.4.67-1~deb11u3
  • L
Uncontrolled Memory Allocation

<2.4.68-1~deb13u1+e2
  • L
Deployment of Wrong Handler

<2.4.68-1~deb13u1+e2
  • L
Heap-based Buffer Overflow

<2.4.67-1~deb11u3
  • L
Heap-based Buffer Overflow

<2.4.67-1~deb11u3
  • L
Buffer Over-read

<2.4.67-1~deb12u2
  • L
Out-of-bounds Read

<2.4.67-1~deb12u2
  • L
Out-of-bounds Read

<2.4.67-1~deb12u2
  • L
CVE-2026-33523

<2.4.67-1~deb12u2
  • L
NULL Pointer Dereference

<2.4.67-1~deb12u2
  • L
Information Exposure

<2.4.67-1~deb12u2
  • L
Cross-site Scripting (XSS)

<2.4.67-1~deb11u3
  • L
NULL Pointer Dereference

<2.4.67-1~deb12u2
  • L
Allocation of Resources Without Limits or Throttling

<2.4.67-1~deb12u2
  • L
Use After Free

<2.4.67-1~deb11u3
  • L
Heap-based Buffer Overflow

<2.4.67-1~deb12u2
  • L
Improper Privilege Management

<2.4.67-1~deb12u2
  • L
Double Free

<2.4.67-1~deb12u2
  • L
CVE-2025-66200

<2.4.66-1~deb12u1
  • L
Improper Neutralization

<2.4.66-1~deb12u1
  • L
Information Exposure

<2.4.66-1~deb12u1
  • L
Integer Overflow or Wraparound

<2.4.66-1~deb12u1
  • L
Memory Leak

<2.4.65-1~deb12u1
  • L
Improper Authentication

<2.4.65-1~deb12u1
  • L
Reachable Assertion

<2.4.65-1~deb12u1
  • L
Improper Access Control

<2.4.65-1~deb12u1
  • L
Improper Neutralization

<2.4.65-1~deb12u1
  • L
Server-Side Request Forgery (SSRF)

<2.4.65-1~deb12u1
  • L
Improper Input Validation

<2.4.65-1~deb12u1
  • M
CVE-2024-40725

<2.4.62-1~deb12u1
  • L
Improper Input Validation

<2.4.61-1~deb12u1
  • H
NULL Pointer Dereference

<2.4.61-1~deb12u1
  • C
CVE-2024-38476

<2.4.61-1~deb12u1
  • C
Improper Encoding or Escaping of Output

<2.4.61-1~deb12u1
  • C
Improper Encoding or Escaping of Output

<2.4.61-1~deb12u1
  • L
Improper Encoding or Escaping of Output

<2.4.61-1~deb12u1
  • L
NULL Pointer Dereference

<2.4.61-1~deb12u1
  • H
Allocation of Resources Without Limits or Throttling

<2.4.59-1~deb12u1
  • L
CVE-2024-24795

<2.4.59-1~deb12u1
  • M
Improper Resource Shutdown or Release

<2.4.59-1~deb12u1
  • H
Resource Exhaustion

<2.4.59-1~deb12u1
  • L
CVE-2023-38709

<2.4.59-1~deb12u1
  • H
Out-of-bounds Read

<2.4.59-1~deb12u1
  • H
HTTP Request Smuggling

<2.4.56-1
  • C
HTTP Request Smuggling

<2.4.56-1
  • M
HTTP Response Splitting

<2.4.55-1
  • C
HTTP Request Smuggling

<2.4.55-1
  • C
Insufficient Verification of Data Authenticity

<2.4.54-1
  • H
CVE-2022-30556

<2.4.54-1
  • H
Allocation of Resources Without Limits or Throttling

<2.4.54-1
  • H
Allocation of Resources Without Limits or Throttling

<2.4.54-1
  • C
Integer Overflow or Wraparound

<2.4.54-1
  • M
Integer Overflow or Wraparound

<2.4.54-1
  • H
HTTP Request Smuggling

<2.4.54-1
  • C
Out-of-bounds Write

<2.4.53-1
  • C
Integer Overflow or Wraparound

<2.4.53-1
  • C
HTTP Request Smuggling

<2.4.53-1
  • H
Improper Initialization

<2.4.53-1
  • C
Out-of-bounds Write

<2.4.52-1
  • H
NULL Pointer Dereference

<2.4.52-1
  • C
Directory Traversal

<2.4.51-1
  • C
Directory Traversal

<2.4.50-1
  • H
NULL Pointer Dereference

<2.4.50-1
  • C
Server-Side Request Forgery (SSRF)

<2.4.49-1
  • C
Out-of-bounds Write

<2.4.49-1
  • H
Out-of-bounds Read

<2.4.49-1
  • H
NULL Pointer Dereference

<2.4.49-1
  • H
CVE-2021-33193

<2.4.48-4
  • H
NULL Pointer Dereference

<2.4.46-5
  • M
CVE-2021-30641

<2.4.46-6
  • C
Out-of-bounds Write

<2.4.46-6
  • H
NULL Pointer Dereference

<2.4.46-6
  • H
Out-of-bounds Write

<2.4.46-6
  • H
NULL Pointer Dereference

<2.4.46-6
  • H
HTTP Request Smuggling

<2.4.46-1
  • M
Insufficient Verification of Data Authenticity

<2.4.25-1
  • C
Buffer Overflow

<2.4.46-1
  • M
HTTP Request Smuggling

<2.4.48-2
  • M
Open Redirect

<2.4.41-1
  • H
NULL Pointer Dereference

<2.4.41-1
  • M
Cross-site Scripting (XSS)

<2.4.41-1
  • C
Use After Free

<2.4.41-1
  • H
Out-of-bounds Write

<2.4.41-1
  • H
Session Fixation

<2.4.38-1
  • M
Resource Exhaustion

<2.4.38-1
  • M
CVE-2018-11763

<2.4.35-1
  • H
Improper Input Validation

<2.4.33-1
  • H
Out-of-bounds Write

<2.4.33-1
  • H
Out-of-bounds Write

<2.4.55-1
  • H
HTTP Request Smuggling

<2.4.46-1
  • M
Use of Uninitialized Resource

<2.4.43-1
  • M
Open Redirect

<2.4.43-1
  • H
Allocation of Resources Without Limits or Throttling

<2.4.41-1
  • M
Use of Incorrectly-Resolved Name or Reference

<2.4.38-3
  • H
Race Condition

<2.4.38-3
  • H
CVE-2019-0215

<2.4.38-3
  • H
Use After Free

<2.4.38-3
  • M
HTTP Request Smuggling

<2.4.38-3
  • M
Use After Free

<2.4.38-3
  • H
CVE-2019-0190

<2.4.38-1
  • H
NULL Pointer Dereference

<2.4.34-1
  • H
Resource Exhaustion

<2.4.34-1
  • C
Improper Authentication

<2.4.33-1
  • H
Out-of-bounds Read

<2.4.33-1
  • M
NULL Pointer Dereference

<2.4.33-1
  • M
Out-of-Bounds

<2.4.33-1
  • M
CVE-2018-1283

<2.4.33-1
  • H
Use After Free

<2.4.27-6
  • C
Improper Input Validation

<2.4.27-1
  • C
Out-of-Bounds

<2.4.25-4
  • H
Out-of-bounds Read

<2.4.25-4
  • H
NULL Pointer Dereference

<2.4.25-4
  • C
NULL Pointer Dereference

<2.4.25-4
  • C
Improper Authentication

<2.4.25-4
  • H
CVE-2016-8743

<2.4.25-1
  • H
Improper Input Validation

<2.4.25-1
  • H
CVE-2016-5387

<2.4.23-2
  • H
Improper Access Control

<2.4.23-1
  • M
CRLF Injection

<2.4.25-1
  • H
Improper Input Validation

<2.4.25-1
  • M
Resource Management Errors

<2.4.20-1
  • H
Cryptographic Issues

<2.4.25-1
  • M
Access Restriction Bypass

<2.4.16-1
  • M
Code

<2.4.16-1
  • M
Improper Input Validation

<2.4.10-10
  • M
Incorrect Authorization

<2.4.10-9
  • M
Out-of-Bounds

<2.4.10-8
  • M
NULL Pointer Dereference

<2.4.10-3
  • M
Resource Management Errors

<2.4.10-1
  • M
Race Condition

<2.4.10-1
  • M
Resource Exhaustion

<2.4.10-1
  • M
Improper Input Validation

<2.4.10-1
  • M
CVE-2014-0098

<2.4.9-1
  • M
CVE-2013-6438

<2.4.9-1
  • M
CVE-2013-5704

<2.4.10-2
  • M
CVE-2013-4352

<2.4.7-1
  • H
CVE-2013-2249

<2.4.6-1
  • M
CVE-2013-1896

<2.4.6-1
  • M
CVE-2013-1862

<2.4.1-1
  • M
Access Restriction Bypass

<2.2.22-13
  • L
Cryptographic Issues

<2.2.22-12
  • M
Cross-site Scripting (XSS)

<2.2.22-13
  • M
Resource Management Errors

<2.2.22-1
  • M
Cross-site Scripting (XSS)

<2.2.22-13
  • L
Cross-site Scripting (XSS)

<2.2.22-8
  • M
CVE-2012-0216

<2.2.22-4
  • M
CVE-2012-0053

<2.2.22-1
  • M
CVE-2012-0031

<2.2.22-1
  • L
Improper Input Validation

<2.2.22-1
  • L
Improper Input Validation

<2.4.1-1
  • M
Improper Input Validation

<2.2.21-3
  • M
Improper Input Validation

<2.2.18-1
  • M
Numeric Errors

<2.2.21-4
  • M
Improper Input Validation

<2.2.21-2
  • M
Resource Exhaustion

<2.2.21-1
  • H
Resource Exhaustion

<2.2.19-2
  • M
CVE-2011-1176

<2.2.17-2
  • M
Information Exposure

<2.2.9-10
  • M
Out-of-Bounds

<2.2.16-3
  • M
CVE-2010-1452

<2.2.16-1
  • M
Information Exposure

<2.2.15-1
  • M
CVE-2010-0408

<2.2.15-1
  • M
Improper Certificate Validation

<2.2.14-2
  • M
CVE-2009-3095

<2.2.13-2
  • L
NULL Pointer Dereference

<2.2.13-2
  • M
Resource Exhaustion

<2.2.11-7
  • M
Resource Exhaustion

<2.2.11-7
  • M
Configuration

<2.2.11-6
  • M
CVE-2009-1191

<2.2.11-4
  • M
Cross-site Scripting (XSS)

<2.2.9-7
  • M
Allocation of Resources Without Limits or Throttling

<2.2.9-1
  • M
Cross-site Scripting (XSS)

<2.2.8-1
  • M
Resource Management Errors

<2.2.8-4
  • L
Arbitrary Code Injection

<2.4.67-1~deb13u3
  • M
Cross-site Scripting (XSS)

<2.2.22-8
  • M
Cross-site Scripting (XSS)

<2.2.8-1
  • M
Resource Management Errors

<2.2.15-3
  • M
Resource Management Errors

<2.2.8-1
  • L
Cross-site Scripting (XSS)

<2.2.8-1
  • M
Cross-site Request Forgery (CSRF)

<2.2.9-1
  • M
Cross-site Scripting (XSS)

<2.2.8-1
  • M
Cross-site Scripting (XSS)

<2.2.6-3
  • M
Cross-site Scripting (XSS)

<2.2.8-1
  • M
Cross-site Scripting (XSS)

<2.2.6-1
  • M
Out-of-bounds Read

<2.2.6-1
  • M
CVE-2007-3304

<2.2.4-2
  • M
Arbitrary Code Injection

<2.4.68-1~deb13u1
  • M
CVE-2007-1863

<2.2.4-1
  • M
CVE-2007-1743

<2.4.68-1~deb13u1
  • M
CVE-2007-1742

<2.2.8-5
  • H
Race Condition

<2.2.8-5
  • H
Resource Exhaustion

<2.4.68-1~deb13u1
  • M
CVE-2006-5752

<2.2.4-2
  • M
Cross-site Scripting (XSS)

<2.0.55-4.1
  • H
Numeric Errors

<2.0.55-4.1
  • M
Resource Management Errors

<2.0.55-4
  • M
Cross-site Scripting (XSS)

<2.0.55-4
  • M
Allocation of Resources Without Limits or Throttling

<2.0.55-1
  • M
CVE-2005-2728

<2.0.54-5
  • C
CVE-2005-2700

<2.0.54-5
  • M
HTTP Request Smuggling

<2.0.54-5
  • H
CVE-2005-1344

<2.0.54-3
  • M
Off-by-one Error

<2.0.54-5
  • M
CVE-2004-1834

<2.0.53-1
  • M
CVE-2004-0942

<2.0.52-2
  • H
CVE-2004-0885

<2.0.52-2
  • H
CVE-2004-0811

<2.0.52
  • M
CVE-2004-0809

<2.0.51-1
  • M
CVE-2004-0786

<2.0.51
  • M
CVE-2004-0751

<2.0.50-11
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<2.0.51
  • H
Incorrect Calculation of Buffer Size

<2.0.51
  • M
CVE-2004-0493

<2.0.50-1
  • H
Out-of-bounds Write

<2.0.50-1
  • M
CVE-2004-0113

<2.0.52
  • L
Cross-site Scripting (XSS)

*
  • M
Numeric Errors

*
  • M
CVE-2003-1307

<2.4.68-1~deb13u1
  • C
CVE-2003-0789

<2.0.48
  • H
Out-of-Bounds

<2.0.48
  • M
CVE-2003-0254

<2.0.47
  • M
CVE-2003-0253

<2.0.47
  • M
CVE-2003-0245

<2.0.46
  • M
CVE-2003-0192

<2.0.47
  • M
CVE-2003-0189

<2.0.46
  • M
CVE-2003-0134

<2.0.46
  • M
Missing Release of Resource after Effective Lifetime

<2.0.45
  • M
CVE-2003-0083

<2.0.46
  • M
CVE-2003-0020

<2.0.49
  • H
Improper Locking

<2.0.42-1
  • M
CVE-2002-1593

<2.0.42
  • M
CVE-2002-1592

<2.0.36
  • M
CVE-2002-1156

<2.0.43
  • M
CVE-2002-0840

<2.0.43-1
  • H
CVE-2002-0661

<2.0.40
  • M
CVE-2002-0654

<2.0.40
  • H
CVE-2002-0392

<2.0.37
  • M
Session Fixation

<2.4.68-1~deb13u1