apache2 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the apache2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Uncontrolled Memory Allocation	<2.4.66-150600.5.55.1
M Buffer Underflow	<2.4.66-150600.5.55.1
M Use After Free	<2.4.66-150600.5.55.1
M Heap-based Buffer Overflow	<2.4.66-150600.5.55.1
M Improper Privilege Management	<2.4.66-150600.5.55.1
M Exposure of Resource to Wrong Sphere	<2.4.66-150600.5.55.1
M Out-of-bounds Read	<2.4.66-150600.5.55.1
M Heap-based Buffer Overflow	<2.4.66-150600.5.55.1
M Buffer Over-read	<2.4.66-150600.5.55.1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2.4.66-150600.5.55.1
M Heap-based Buffer Overflow	<2.4.66-150600.5.55.1
M Use After Free	<2.4.66-150600.5.55.1
M Cross-site Scripting (XSS)	<2.4.66-150600.5.55.1
M Out-of-bounds Read	<2.4.66-150600.5.52.1
H Buffer Over-read	<2.4.66-150600.5.52.1
H CVE-2026-33523	<2.4.66-150600.5.52.1
M NULL Pointer Dereference	<2.4.66-150600.5.52.1
H Information Exposure	<2.4.66-150600.5.52.1
H Double Free	<2.4.66-150600.5.52.1
H Out-of-bounds Read	<2.4.66-150600.5.52.1
M Allocation of Resources Without Limits or Throttling	<2.4.66-150600.5.52.1
H NULL Pointer Dereference	<2.4.66-150600.5.52.1
H Improper Privilege Management	<2.4.66-150600.5.52.1
M Heap-based Buffer Overflow	<2.4.66-150600.5.52.1
M CVE-2025-66200	<2.4.58-150600.5.41.1
M Improper Neutralization	<2.4.58-150600.5.41.1
M Information Exposure	<2.4.58-150600.5.41.1
M Integer Overflow or Wraparound	<2.4.58-150600.5.41.1
M Memory Leak	<2.4.58-150600.5.35.1
H Improper Authentication	<2.4.58-150600.5.35.1
H Reachable Assertion	<2.4.58-150600.5.35.1
H Improper Access Control	<2.4.58-150600.5.35.1
M Server-Side Request Forgery (SSRF)	<2.4.58-150600.5.35.1
M Improper Neutralization	<2.4.58-150600.5.35.1
M Improper Input Validation	<2.4.58-150600.5.35.1
H CVE-2024-40725	<2.4.58-150600.5.26.1
M CVE-2024-39884	<2.4.58-150600.5.23.1
H Improper Encoding or Escaping of Output	<2.4.58-150600.5.23.1
M Improper Encoding or Escaping of Output	<2.4.58-150600.5.23.1
H CVE-2024-38476	<2.4.58-150600.5.18.1
H Improper Encoding or Escaping of Output	<2.4.58-150600.5.18.1
M NULL Pointer Dereference	<2.4.58-150600.5.18.1
M Improper Input Validation	<2.4.58-150600.5.11.1
H NULL Pointer Dereference	<2.4.58-150600.5.11.1
H Allocation of Resources Without Limits or Throttling	<2.4.58-150600.5.3.1
M CVE-2023-38709	<2.4.58-150600.5.3.1
M CVE-2024-24795	<2.4.58-150600.5.3.1

Vulnerability

Vulnerable Version

Uncontrolled Memory Allocation

<2.4.66-150600.5.55.1