mod_ssl | Snyk

Direct Vulnerabilities

Known vulnerabilities in the mod_ssl package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Use After Free	*
M Improper Privilege Management	*
M Use After Free	<0:2.4.69-1.hum1
M Improper Privilege Management	<0:2.4.69-1.hum1
H Use After Free	<0:2.4.69-1.hum1
L Out-of-bounds Write	<1:2.4.63-13.el10_2.5
H HTTP Request Smuggling	<0:2.4.69-1.hum1
L Out-of-bounds Write	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
L Improper Cross-boundary Removal of Sensitive Data	<0:2.4.69-1.hum1
M Path Equivalence	<0:2.4.69-1.hum1
M Integer Overflow or Wraparound	<0:2.4.69-1.hum1
M Server-Side Request Forgery (SSRF)	<0:2.4.69-1.hum1
L Incorrect Implementation of Authentication Algorithm	<0:2.4.69-1.hum1
H NULL Pointer Dereference	<0:2.4.69-1.hum1
M Files or Directories Accessible to External Parties	<0:2.4.69-1.hum1
H Out-of-bounds Write	<0:2.4.69-1.hum1
M Incorrect Calculation of Buffer Size	<0:2.4.69-1.hum1
M Expired Pointer Dereference	<0:2.4.69-1.hum1
H Authentication Bypass	<0:2.4.69-1.hum1
H Out-of-bounds Write	<0:2.4.69-1.hum1
L Deployment of Wrong Handler	<0:2.4.69-1.hum1
L Incorrect Implementation of Authentication Algorithm	*
L Deployment of Wrong Handler	*
L Improper Cross-boundary Removal of Sensitive Data	*
M Server-Side Request Forgery (SSRF)	*
M Expired Pointer Dereference	*
M Incorrect Calculation of Buffer Size	*
H HTTP Request Smuggling	*
H Authentication Bypass	*
M Files or Directories Accessible to External Parties	*
H NULL Pointer Dereference	*
H Out-of-bounds Write	*
H Out-of-bounds Write	*
H NULL Pointer Dereference	*
M Path Equivalence	*
M Integer Overflow or Wraparound	*
M Allocation of Resources Without Limits or Throttling	<0:2.4.68-6.hum1
L Expired Pointer Dereference	<1:2.4.63-13.el10_2.6
M Out-of-bounds Write	*
M Use of Uninitialized Resource	*
H Out-of-bounds Write	*
H HTTP Request Smuggling	*
M Buffer Overflow	<1:2.4.63-1.el10_0.4
M Buffer Over-read	<1:2.4.63-1.el10_0.4
M CRLF Injection	<1:2.4.63-1.el10_0.4
H Buffer Overflow	<1:2.4.63-1.el10_0.4
M Improper Null Termination	<1:2.4.63-1.el10_0.4
M Buffer Underflow	<1:2.4.63-1.el10_0.4
L NULL Pointer Dereference	<1:2.4.63-1.el10_0.4
M NULL Pointer Dereference	<1:2.4.63-1.el10_0.4
M Out-of-bounds Read	<1:2.4.63-1.el10_0.4
H Buffer Overflow	<1:2.4.63-1.el10_0.4
H Out-of-bounds Read	<1:2.4.63-1.el10_0.4
H Out-of-bounds Write	<1:2.4.63-1.el10_0.4
M External Control of File Name or Path	<1:2.4.63-13.el10_2.4
M Information Exposure	<1:2.4.63-13.el10_2.4
M Directory Traversal	<1:2.4.63-13.el10_2.4
M Out-of-bounds Read	<1:2.4.63-13.el10_2.4
M Incorrect Privilege Assignment	<1:2.4.63-13.el10_2.4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1:2.4.63-13.el10_2.4
M CRLF Injection	<1:2.4.63-13.el10_2.4
H Buffer Overflow	<1:2.4.63-13.el10_2.4
H Buffer Overflow	<1:2.4.63-13.el10_2.4
L NULL Pointer Dereference	<1:2.4.63-13.el10_2.4
M Expired Pointer Dereference	*
H Out-of-bounds Read	<1:2.4.63-13.el10_2.4
M Buffer Underflow	<1:2.4.63-13.el10_2.4
M Buffer Overflow	<1:2.4.63-13.el10_2.4
M Cross-site Scripting (XSS)	*
M Buffer Over-read	<1:2.4.63-13.el10_2.1
M NULL Pointer Dereference	<1:2.4.63-13.el10_2.1
H Out-of-bounds Write	<1:2.4.63-13.el10_2.1
M Out-of-bounds Read	<1:2.4.63-13.el10_2.1
M Improper Null Termination	<1:2.4.63-13.el10_2.1
M Out-of-bounds Write	*
L Out-of-bounds Read	*
M Resource Exhaustion	*
M Server-Side Request Forgery (SSRF)	*
M NULL Pointer Dereference	*
H Out-of-bounds Write	*
M NULL Pointer Dereference	*
L Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
H Out-of-bounds Read	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M HTTP Response Splitting	*
L Improper Authentication	*
M CRLF Injection	*
H Information Exposure	<1:2.4.63-1.el10_0.3
M Authentication Bypass by Primary Weakness	<1:2.4.63-4.el10_1.3
H Information Exposure	<1:2.4.63-4.el10_1.3
M Improper Neutralization	<1:2.4.63-4.el10_1.3
M Resource Exhaustion	*
M Improper Output Neutralization for Logs	<1:2.4.63-1.el10_0.2
M Improper Access Control	<1:2.4.63-1.el10_0.2
M HTTP Request Smuggling	<1:2.4.63-1.el10_0.2
M Server-Side Request Forgery (SSRF)	*
M CVE-2007-1863	<1:2.0.59-1.el4s1.7
M Out-of-bounds Read	<1:2.0.59-1.el4s1.8
M Cross-site Scripting (XSS)	<1:2.0.59-1.el4s1.7
M CVE-2007-3304	<1:2.0.59-1.el4s1.7
M Cross-site Scripting (XSS)	<1:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	<1:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	<1:2.0.59-1.el4s1.10
L Cross-site Scripting (XSS)	<1:2.0.59-1.el4s1.8
M Access Restriction Bypass	<1:2.0.63-2.el4s1.2
H Resource Exhaustion	<1:2.2.3-22.el5_3.3
H Resource Exhaustion	<1:2.0.46-78.ent

Vulnerability

Vulnerable Version

Use After Free