httpd | Snyk

Direct Vulnerabilities

Known vulnerabilities in the httpd package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	*
M Improper Privilege Management	*
M Use After Free	<0:2.4.69-1.hum1
M Improper Privilege Management	<0:2.4.69-1.hum1
H Use After Free	<0:2.4.69-1.hum1
L Out-of-bounds Write	<0:2.4.63-13.el10_2.5
L Incorrect Implementation of Authentication Algorithm	<0:2.4.69-1.hum1
L Incorrect Implementation of Authentication Algorithm	*
L Deployment of Wrong Handler	<0:2.4.69-1.hum1
L Deployment of Wrong Handler	*
L Improper Cross-boundary Removal of Sensitive Data	<0:2.4.69-1.hum1
L Improper Cross-boundary Removal of Sensitive Data	*
L Out-of-bounds Write	<0:2.4.69-1.hum1
M Server-Side Request Forgery (SSRF)	<0:2.4.69-1.hum1
M Server-Side Request Forgery (SSRF)	*
M Expired Pointer Dereference	<0:2.4.69-1.hum1
M Expired Pointer Dereference	*
M Incorrect Calculation of Buffer Size	<0:2.4.69-1.hum1
M Incorrect Calculation of Buffer Size	*
H HTTP Request Smuggling	<0:2.4.69-1.hum1
H Authentication Bypass	<0:2.4.69-1.hum1
H HTTP Request Smuggling	*
M Files or Directories Accessible to External Parties	<0:2.4.69-1.hum1
H Authentication Bypass	*
M Files or Directories Accessible to External Parties	*
H Out-of-bounds Write	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
H Out-of-bounds Write	*
H NULL Pointer Dereference	*
H Out-of-bounds Write	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
H NULL Pointer Dereference	*
H Out-of-bounds Write	*
M Path Equivalence	<0:2.4.69-1.hum1
M Path Equivalence	*
M Integer Overflow or Wraparound	<0:2.4.69-1.hum1
M Integer Overflow or Wraparound	*
M Allocation of Resources Without Limits or Throttling	<0:2.4.68-6.hum1
L Expired Pointer Dereference	<0:2.4.63-13.el10_2.6
M Buffer Overflow	<0:2.4.63-1.el10_0.4
M Buffer Over-read	<0:2.4.63-1.el10_0.4
M CRLF Injection	<0:2.4.63-1.el10_0.4
H Buffer Overflow	<0:2.4.63-1.el10_0.4
M Improper Null Termination	<0:2.4.63-1.el10_0.4
M Buffer Underflow	<0:2.4.63-1.el10_0.4
L NULL Pointer Dereference	<0:2.4.63-1.el10_0.4
M NULL Pointer Dereference	<0:2.4.63-1.el10_0.4
M Out-of-bounds Read	<0:2.4.63-1.el10_0.4
H Buffer Overflow	<0:2.4.63-1.el10_0.4
H Out-of-bounds Read	<0:2.4.63-1.el10_0.4
H Out-of-bounds Write	<0:2.4.63-1.el10_0.4
M External Control of File Name or Path	<0:2.4.63-13.el10_2.4
M Information Exposure	<0:2.4.63-13.el10_2.4
M Directory Traversal	<0:2.4.63-13.el10_2.4
M Out-of-bounds Read	<0:2.4.63-13.el10_2.4
M Incorrect Privilege Assignment	<0:2.4.63-13.el10_2.4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.68-1.hum1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.63-13.el10_2.4
M CRLF Injection	<0:2.4.63-13.el10_2.4
H Buffer Overflow	<0:2.4.63-13.el10_2.4
H Buffer Overflow	<0:2.4.63-13.el10_2.4
L NULL Pointer Dereference	<0:2.4.63-13.el10_2.4
M Expired Pointer Dereference	<0:2.4.68-1.hum1
M Expired Pointer Dereference	*
H Out-of-bounds Read	<0:2.4.63-13.el10_2.4
M Buffer Underflow	<0:2.4.63-13.el10_2.4
M Buffer Overflow	<0:2.4.63-13.el10_2.4
L Expired Pointer Dereference	<0:2.4.68-1.hum1
M Out-of-bounds Read	<0:2.4.68-1.hum1
M Buffer Overflow	<0:2.4.68-1.hum1
H Out-of-bounds Read	<0:2.4.68-1.hum1
H Buffer Overflow	<0:2.4.68-1.hum1
H Buffer Overflow	<0:2.4.68-1.hum1
M Directory Traversal	<0:2.4.68-1.hum1
M Incorrect Privilege Assignment	<0:2.4.68-1.hum1
M Cross-site Scripting (XSS)	<0:2.4.68-1.hum1
M Cross-site Scripting (XSS)	*
M Buffer Underflow	<0:2.4.68-1.hum1
H Improper Handling of Highly Compressed Data (Data Amplification)	<0:2.4.68-1.hum1
M Buffer Over-read	<0:2.4.63-13.el10_2.1
M NULL Pointer Dereference	<0:2.4.63-13.el10_2.1
H Out-of-bounds Write	<0:2.4.63-13.el10_2.1
M Out-of-bounds Read	<0:2.4.63-13.el10_2.1
M Improper Null Termination	<0:2.4.63-13.el10_2.1
C Integer Overflow or Wraparound	*
L Out-of-bounds Read	*
M Resource Exhaustion	*
L Improper Input Validation	*
L Improper Input Validation	*
L Improper Input Validation	*
L Improper Input Validation	*
L Uncontrolled Recursion	*
L Uncontrolled Recursion	*
L Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
H Integer Overflow or Wraparound	*
L Buffer Overflow	*
L Improper Input Validation	*
L Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Out-of-bounds Read	*
H Resource Exhaustion	*
H Out-of-bounds Read	*
M CVE-2017-10140	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Input Validation	*
M Improper Input Validation	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
H Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M CRLF Injection	<0:2.4.67-1.hum1
M CRLF Injection	*
L NULL Pointer Dereference	<0:2.4.67-1.hum1
M Information Exposure	<0:2.4.67-1.hum1
M Buffer Over-read	<0:2.4.67-0.1.hum1
M NULL Pointer Dereference	<0:2.4.67-0.1.hum1
M Out-of-bounds Read	<0:2.4.67-0.1.hum1
M Improper Null Termination	<0:2.4.67-0.1.hum1
M External Control of File Name or Path	<0:2.4.67-0.1.hum1
H CVE-2026-23918	<0:2.4.67-0.1.hum1
M Improper Neutralization	<0:2.4.66-6.hum1
H Server-Side Request Forgery (SSRF)	<0:2.4.66-6.hum1
M Authentication Bypass by Primary Weakness	<0:2.4.66-6.hum1
H Information Exposure	<0:2.4.66-6.hum1
H Resource Exhaustion	*
H Information Exposure	<0:2.4.63-1.el10_0.3
M Authentication Bypass by Primary Weakness	<0:2.4.63-4.el10_1.3
H Information Exposure	<0:2.4.63-4.el10_1.3
M Improper Neutralization	<0:2.4.63-4.el10_1.3
M Authentication Bypass by Primary Weakness	*
M Improper Neutralization	*
M Improper Output Neutralization for Logs	<0:2.4.63-1.el10_0.2
M Improper Access Control	<0:2.4.63-1.el10_0.2
M HTTP Request Smuggling	<0:2.4.63-1.el10_0.2
M Server-Side Request Forgery (SSRF)	*
H Improper Input Validation	*
M Resource Exhaustion	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
M HTTP Request Smuggling	*
H Out-of-bounds Write	*
H HTTP Request Smuggling	*
L Improper Input Validation	*
L Improper Input Validation	*
L Improper Input Validation	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Write	*
H Out-of-bounds Write	*
M Server-Side Request Forgery (SSRF)	*
M Out-of-bounds Write	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Improper Input Validation	*
H Missing Initialization of a Variable	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M NULL Pointer Dereference	*
M NULL Pointer Dereference	*
M Improper Authentication	*
M Improper Authentication	*
M Improper Input Validation	*
M HTTP Response Splitting	*
M HTTP Response Splitting	*
M CVE-2007-1863	<0:2.0.59-1.el4s1.7
M Out-of-bounds Read	<0:2.0.59-1.el4s1.8
M Cross-site Scripting (XSS)	<0:2.0.59-1.el4s1.7
M CVE-2007-3304	<0:2.0.59-1.el4s1.7
M Cross-site Scripting (XSS)	<0:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	<0:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	<0:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	*
L Integer Overflow or Wraparound	*
L Integer Overflow or Wraparound	*
L CVE-2013-1862	*
M CVE-2013-1896	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Out-of-Bounds	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
M Encoding Error	*
M Encoding Error	*
M Encoding Error	*
M Resource Management Errors	*
M Resource Exhaustion	*
H Out-of-bounds Write	*
M NULL Pointer Dereference	*
L Improper Authentication	*
L Improper Authentication	*
L Improper Authentication	*
L Improper Authentication	*
L CVE-2012-0883	*
M CVE-2012-0053	*
M CVE-2012-0053	*
L Cross-site Scripting (XSS)	<0:2.0.59-1.el4s1.8
M Allocation of Resources Without Limits or Throttling	*
M Access Restriction Bypass	<0:2.0.63-2.el4s1.2
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	*
H Resource Exhaustion	<0:2.2.3-22.el5_3.3
H Resource Exhaustion	<0:2.0.46-78.ent
M Improper Input Validation	*
M Improper Input Validation	*
M Use of Uninitialized Resource	*
L HTTP Response Splitting	*
L HTTP Response Splitting	*

Vulnerability

Vulnerable Version

Use After Free