Search CVE reports
311 – 320 of 57482 results
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and...
11 affected packages
python2.7, python3.4, python3.5, python3.6, python3.7...
| Package | 14.04 LTS |
|---|---|
| python2.7 | Needs evaluation |
| python3.4 | Needs evaluation |
| python3.5 | Needs evaluation |
| python3.6 | — |
| python3.7 | — |
| python3.8 | — |
| python3.9 | — |
| python3.10 | — |
| python3.11 | — |
| python3.12 | — |
| python3.14 | — |
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication state corruption via concurrent...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to replay captured digest authentication credentials via...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi response with Transfer-Encoding. This issue affects...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Not affected |
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurations, an untrusted FTP server to cause the proxy to...
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Vulnerable |
Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68.
1 affected package
apache2
| Package | 14.04 LTS |
|---|---|
| apache2 | Fixed |