httpd-tools

Direct Vulnerabilities

Known vulnerabilities in the httpd-tools package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Improper Neutralization	<0:2.4.66-6.hum1
M Authentication Bypass by Primary Weakness	<0:2.4.66-6.hum1
H Information Exposure	<0:2.4.66-6.hum1
M Directory Traversal	<0:2.4.68-1.hum1
M Expired Pointer Dereference	<0:2.4.68-1.hum1
H Improper Handling of Highly Compressed Data (Data Amplification)	<0:2.4.68-1.hum1
H Use After Free	*
M Improper Privilege Management	*
M Use After Free	<0:2.4.69-1.hum1
M Improper Privilege Management	<0:2.4.69-1.hum1
H Use After Free	<0:2.4.69-1.hum1
L Out-of-bounds Write	<0:2.4.63-13.el10_2.5
M External Control of File Name or Path	<0:2.4.67-0.1.hum1
M Out-of-bounds Read	<0:2.4.68-1.hum1
M Cross-site Scripting (XSS)	<0:2.4.68-1.hum1
L NULL Pointer Dereference	<0:2.4.67-1.hum1
H Buffer Overflow	<0:2.4.68-1.hum1
L Expired Pointer Dereference	<0:2.4.68-1.hum1
M Buffer Underflow	<0:2.4.68-1.hum1
M Buffer Over-read	<0:2.4.67-0.1.hum1
M Improper Null Termination	<0:2.4.67-0.1.hum1
M Out-of-bounds Read	<0:2.4.67-0.1.hum1
M NULL Pointer Dereference	<0:2.4.67-0.1.hum1
H Out-of-bounds Read	<0:2.4.68-1.hum1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.68-1.hum1
M Incorrect Privilege Assignment	<0:2.4.68-1.hum1
H Buffer Overflow	<0:2.4.68-1.hum1
M Buffer Overflow	<0:2.4.68-1.hum1
H HTTP Request Smuggling	<0:2.4.69-1.hum1
L Out-of-bounds Write	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
L Improper Cross-boundary Removal of Sensitive Data	<0:2.4.69-1.hum1
M Path Equivalence	<0:2.4.69-1.hum1
M Integer Overflow or Wraparound	<0:2.4.69-1.hum1
M Server-Side Request Forgery (SSRF)	<0:2.4.69-1.hum1
L Incorrect Implementation of Authentication Algorithm	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
M Files or Directories Accessible to External Parties	<0:2.4.69-1.hum1
H Out-of-bounds Write	<0:2.4.69-1.hum1
M Incorrect Calculation of Buffer Size	<0:2.4.69-1.hum1
M Expired Pointer Dereference	<0:2.4.69-1.hum1
H Authentication Bypass	<0:2.4.69-1.hum1
H Out-of-bounds Write	<0:2.4.69-1.hum1
L Deployment of Wrong Handler	<0:2.4.69-1.hum1
L Incorrect Implementation of Authentication Algorithm	*
L Deployment of Wrong Handler	*
L Improper Cross-boundary Removal of Sensitive Data	*
M Server-Side Request Forgery (SSRF)	*
M Expired Pointer Dereference	*
M Incorrect Calculation of Buffer Size	*
H HTTP Request Smuggling	*
H Authentication Bypass	*
M Files or Directories Accessible to External Parties	*
H Out-of-bounds Write	*
H NULL Pointer Dereference	*
H NULL Pointer Dereference	*
H Out-of-bounds Write	*
M Path Equivalence	*
M Integer Overflow or Wraparound	*
M Allocation of Resources Without Limits or Throttling	<0:2.4.68-6.hum1
L Expired Pointer Dereference	<0:2.4.63-13.el10_2.6
M Out-of-bounds Write	*
M Use of Uninitialized Resource	*
H Out-of-bounds Write	*
H HTTP Request Smuggling	*
M Buffer Overflow	<0:2.4.63-1.el10_0.4
M Buffer Over-read	<0:2.4.63-1.el10_0.4
M CRLF Injection	<0:2.4.63-1.el10_0.4
H Buffer Overflow	<0:2.4.63-1.el10_0.4
M Improper Null Termination	<0:2.4.63-1.el10_0.4
M Buffer Underflow	<0:2.4.63-1.el10_0.4
L NULL Pointer Dereference	<0:2.4.63-1.el10_0.4
M NULL Pointer Dereference	<0:2.4.63-1.el10_0.4
M Out-of-bounds Read	<0:2.4.63-1.el10_0.4
H Buffer Overflow	<0:2.4.63-1.el10_0.4
H Out-of-bounds Read	<0:2.4.63-1.el10_0.4
H Out-of-bounds Write	<0:2.4.63-1.el10_0.4
M External Control of File Name or Path	<0:2.4.63-13.el10_2.4
M Information Exposure	<0:2.4.63-13.el10_2.4
M Directory Traversal	<0:2.4.63-13.el10_2.4
M Out-of-bounds Read	<0:2.4.63-13.el10_2.4
M Incorrect Privilege Assignment	<0:2.4.63-13.el10_2.4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.4.63-13.el10_2.4
M CRLF Injection	<0:2.4.63-13.el10_2.4
H Buffer Overflow	<0:2.4.63-13.el10_2.4
H Buffer Overflow	<0:2.4.63-13.el10_2.4
L NULL Pointer Dereference	<0:2.4.63-13.el10_2.4
M Expired Pointer Dereference	*
H Out-of-bounds Read	<0:2.4.63-13.el10_2.4
M Buffer Underflow	<0:2.4.63-13.el10_2.4
M Buffer Overflow	<0:2.4.63-13.el10_2.4
M Cross-site Scripting (XSS)	*
M Buffer Over-read	<0:2.4.63-13.el10_2.1
M NULL Pointer Dereference	<0:2.4.63-13.el10_2.1
H Out-of-bounds Write	<0:2.4.63-13.el10_2.1
M Out-of-bounds Read	<0:2.4.63-13.el10_2.1
M Improper Null Termination	<0:2.4.63-13.el10_2.1
M Out-of-bounds Write	*
L Out-of-bounds Read	*
M Resource Exhaustion	*
M Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
H Out-of-bounds Write	*
M NULL Pointer Dereference	*
L Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
H Out-of-bounds Read	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M HTTP Response Splitting	*
L Improper Authentication	*
M CRLF Injection	*
H Information Exposure	<0:2.4.63-1.el10_0.3
M Authentication Bypass by Primary Weakness	<0:2.4.63-4.el10_1.3
H Information Exposure	<0:2.4.63-4.el10_1.3
M Improper Neutralization	<0:2.4.63-4.el10_1.3
M Resource Exhaustion	*
M Improper Output Neutralization for Logs	<0:2.4.63-1.el10_0.2
M Improper Access Control	<0:2.4.63-1.el10_0.2
M HTTP Request Smuggling	<0:2.4.63-1.el10_0.2
M Server-Side Request Forgery (SSRF)	*

Vulnerability

Vulnerable Version

Improper Neutralization

<0:2.4.66-6.hum1