httpd vulnerabilities

Known vulnerabilities in the httpd package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H CVE-2024-38476	<0:2.4.6-99.0.5.el7_9.1
H Improper Encoding or Escaping of Output	<0:2.4.6-99.0.3.el7_9.1
H NULL Pointer Dereference	<0:2.4.6-99.0.3.el7_9.1
H Improper Encoding or Escaping of Output	<0:2.4.6-99.0.3.el7_9.1
H HTTP Request Smuggling	<0:2.4.6-98.0.3.el7_9.7
H Insufficient Verification of Data Authenticity	<0:2.4.6-97.0.7.el7_9.5
H HTTP Request Smuggling	<0:2.4.6-97.0.5.el7_9.5
H Out-of-bounds Write	<0:2.4.6-97.0.5.el7_9.4
H Out-of-bounds Write	<0:2.4.6-97.0.5.el7_9.2
H NULL Pointer Dereference	<0:2.4.6-97.0.5.el7_9.2
H NULL Pointer Dereference	<0:2.4.6-97.0.3.el7_9.1
H Server-Side Request Forgery (SSRF)	<0:2.4.6-97.0.1.el7_9.1
H Out-of-bounds Write	<0:2.4.6-97.0.5.el7_9.4
M Improper Input Validation	<0:2.4.6-95.0.1.el7
M CVE-2018-1283	<0:2.4.6-95.0.1.el7
M Open Redirect	<0:2.4.6-95.0.1.el7
M Out-of-bounds Read	<0:2.4.6-95.0.1.el7
M Open Redirect	<0:2.4.6-95.0.1.el7
M Use of Uninitialized Resource	<0:2.4.6-95.0.1.el7
M Session Fixation	<0:2.4.6-93.0.1.el7
M Out-of-bounds Write	<0:2.4.6-93.0.1.el7
M Out-of-Bounds	<0:2.4.6-93.0.1.el7
M Race Condition	<0:2.4.6-90.0.1.el7
M Use of Incorrectly-Resolved Name or Reference	<0:2.4.6-90.0.1.el7
L Improper Authentication	<0:2.4.6-89.0.1.el7_6.1
M Use After Free	<0:2.4.6-67.0.1.el7_4.5
H Out-of-Bounds	<0:2.4.6-67.0.1.el7_4.2
H Out-of-bounds Read	<0:2.4.6-67.0.1.el7_4.2
H NULL Pointer Dereference	<0:2.4.6-67.0.1.el7_4.2
H Improper Input Validation	<0:2.4.6-67.0.1.el7_4.2
H Improper Authentication	<0:2.4.6-67.0.1.el7_4.2
M CVE-2016-8743	<0:2.4.6-45.0.1.el7_3.4
M Improper Input Validation	<0:2.4.6-45.0.1.el7_3.4
M Cryptographic Issues	<0:2.4.6-45.0.1.el7_3.4
H CVE-2016-5387	<0:2.4.6-40.0.1.el7_2.4
M Access Restriction Bypass	<0:2.4.6-31.0.1.el7_1.1
M Code	<0:2.4.6-31.0.1.el7_1.1
L CVE-2013-5704	<0:2.4.6-31.0.1.el7
L NULL Pointer Dereference	<0:2.4.6-31.0.1.el7
H Resource Management Errors	<0:2.4.6-18.0.1.el7_0
H Improper Input Validation	<0:2.4.6-18.0.1.el7_0
H Race Condition	<0:2.4.6-18.0.1.el7_0
H Resource Exhaustion	<0:2.4.6-18.0.1.el7_0
H CVE-2013-4352	<0:2.4.6-18.0.1.el7_0

Vulnerability

Vulnerable Version

CVE-2024-38476

<0:2.4.6-99.0.5.el7_9.1

Improper Encoding or Escaping of Output

<0:2.4.6-99.0.3.el7_9.1

NULL Pointer Dereference

<0:2.4.6-99.0.3.el7_9.1

Improper Encoding or Escaping of Output

<0:2.4.6-99.0.3.el7_9.1

HTTP Request Smuggling

<0:2.4.6-98.0.3.el7_9.7