apache http server 2.3.6 vulnerabilities and exploits

(subscribe to this query)

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 up to and including 2.0.63, 2.2.0 up to and including 2.2.14, and 2.3.x prior to 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISA...

Apache Http Server 2.3.0 Apache Http Server 2.3.1 Apache Http Server 2.3.2 Apache Http Server 2.3.3 Apache Http Server 2.3.4 Apache Http Server 2.3.5 Apache Http Server 2.3.6 Apache Http Server 2.0.9 Apache Http Server 2.0.28 Apache Http Server 2.0.32 Apache Http Server 2.0.34 Apache Http Server 2.0.35

2 EDB exploits

fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for remote malicious users to cause a denial of service (memory consumption) via a series of HTTP reques...

Apache Mod Fcgid 2.3.6

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server co...

Apache Tomcat Apache Tomcat 9.0.0 Apache Tomcat 10.0.0 Canonical Ubuntu Linux 20.04 Oracle Mysql Enterprise Monitor Oracle Siebel Ui Framework Oracle Workload Manager 12.2.0.1 Oracle Workload Manager 18c Oracle Workload Manager 19c Opensuse Leap 15.1 Opensuse Leap 15.2 Debian Debian Linux 9.0

1 Github repository

Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module prior to 2.3.9 for the Apache HTTP Server allows remote malicious users to have an unspecified impact via unknown vectors.

Apache Mod Fcgid Debian Debian Linux 6.0 Debian Debian Linux 7.0 Suse Cloud 1.0 Suse Cloud 2.0 Opensuse Opensuse 11.4 Opensuse Opensuse 12.2 Opensuse Opensuse 12.3 Suse Linux Enterprise Software Development Kit 11

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook