Vigie VulnEuropean-hosted Vulnerability DB

Apache Software Foundation Apache HTTP Server

139 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-636862.4.0 – 2.4.68Apache HTTP Server: mod_xml2enc crash on charset conversion failureHIGH 7.50.5 %
CVE-2026-93546≤ 2.4.68Apache HTTP Server: mod_dav_fs namespace overflowHIGH 8.80.4 %
CVE-2026-797682.4.0 – 2.4.68Apache HTTP Server: mod_userdir information disclosureMEDIUM 5.30.5 %
CVE-2026-736372.4.0 – 2.4.68Apache HTTP Server: mod_auth_digest DoS attackHIGH 7.30.5 %
CVE-2026-736362.4.0 – 2.4.68Apache HTTP Server: mod_auth_digest one-time-nonce replay attackHIGH 8.10.4 %
CVE-2026-637182.4.30 – 2.4.68Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smugglingHIGH 7.50.4 %
CVE-2026-632922.4.0 – 2.4.68Apache HTTP Server: mod_vhost_alias stack overflowHIGH 7.50.9 %
CVE-2026-630452.4.0 – 2.4.68Apache HTTP Server: mod_proxy_ftp PASV address handlingHIGH 7.50.4 %
CVE-2026-597972.4.0 – 2.4.68Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionCRITICAL 9.80.5 %
CVE-2026-596852.4.0 – 2.4.68Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMHIGH 7.50.5 %
CVE-2026-584152.4.0 – 2.4.68Apache HTTP Server: mod_dav_fs property database read accessMEDIUM 5.30.5 %
CVE-2026-579412.4.0 – 2.4.68Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancyCRITICAL 9.80.6 %
CVE-2026-564492.4.68Apache HTTP Server: mod_proxy_html: crash in dump_contentHIGH 7.50.6 %
CVE-2026-561542.4.0 – 2.4.68Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}CRITICAL 9.80.5 %
CVE-2026-561532.4.0 – 2.4.68Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_charHIGH 7.50.5 %
CVE-2026-480052.4.0 – 2.4.68Apache HTTP Server: mod_auth_digest reauthentication attackHIGH 7.50.6 %
CVE-2026-473602.4.0 – 2.4.68Apache HTTP Server: mod_session: Session cookie not removed during internal redirectHIGH 7.50.4 %
CVE-2026-467292.4.0 – 2.4.68Apache HTTP Server: mod_heartmonitor denial of serviceHIGH 7.50.5 %
CVE-2026-423562.4.60 – 2.4.68Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directoriesLOW 3.70.4 %
CVE-2026-42528≤ 2.4.68Apache HTTP Server: mod_dav shared lock overflowMEDIUM 4.30.4 %
CVE-2026-499752.4.17 – 2.4.67Apache HTTP Server: mod_http2 denial of serviceHIGH 7.533 %
CVE-2026-489132.4.55 – 2.4.67Apache HTTP Server: mod_http2 memory corruption when file handles exhaustedHIGH 7.30.5 %
CVE-2026-425362.4.0 – 2.4.67Apache HTTP Server: mod_xml2enc heap overflowHIGH 7.51.0 %
CVE-2026-441852.4.0 – 2.4.67Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`HIGH 7.30.7 %
CVE-2026-343552.4.0 – 2.4.67Apache HTTP Server: mod_proxy_html buffer overflowHIGH 7.51.2 %
CVE-2026-446312.4.0 – 2.4.67Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowCRITICAL 9.80.5 %
CVE-2026-441192.4.0 – 2.4.67Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modulesMEDIUM 5.50.2 %
CVE-2026-439512.4.0 – 2.4.67Apache HTTP Server: OOB Read in `merge_response_headers` can cause crashMEDIUM 6.50.5 %
CVE-2026-42535≤ 2.4.67Apache HTTP Server: mod_dav_fs protected directory accessCRITICAL 9.10.5 %
CVE-2026-343562.4.0 – 2.4.67Apache HTTP Server: ProxyPassReverseCookieMap buffer overflowHIGH 7.50.7 %
CVE-2026-441862.4.0 – 2.4.67Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftpHIGH 7.30.6 %
CVE-2026-29170≤ 2.4.67Apache HTTP Server: mod_proxy_ftp XSSMEDIUM 6.10.5 %
CVE-2026-291672.4.0 – 2.4.67Apache HTTP Server: mod_ldap per-dir use-after-freeCRITICAL 9.80.7 %
CVE-2026-28780≤ 2.4.66Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()CRITICAL 9.81.4 %
CVE-2026-291682.4.30 – 2.4.66Apache HTTP Server: mod_md unrestricted OCSP responseHIGH 7.30.6 %
CVE-2026-29169≤ 2.4.66Apache HTTP Server: mod_dav_lock indirect lock crashHIGH 7.50.6 %
CVE-2026-239182.4.66Apache HTTP Server: http2: double free and possible RCE on early resetHIGH 8.850 %
CVE-2026-33006≤ 2.4.66Apache HTTP Server: mod_auth_digest timing attackMEDIUM 4.80.6 %
CVE-2026-330072.4.0 – 2.4.66Apache HTTP Server: mod_authn_socache crashMEDIUM 5.30.5 %
CVE-2026-335232.4.0 – 2.4.66Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status lineMEDIUM 6.50.4 %
CVE-2026-33857≤ 2.4.66Apache HTTP Server: Off-by-one OOB reads in AJP getter functionsMEDIUM 5.30.4 %
CVE-2026-34032≤ 2.4.66Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)MEDIUM 5.30.5 %
CVE-2026-34059≤ 2.4.66Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()HIGH 7.50.4 %
CVE-2026-24072≤ 2.4.66Apache HTTP Server: mod_rewrite elevation of privileges via ap_exprHIGH 8.80.7 %
CVE-2025-58098< 2.4.66Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...HIGH 8.31.4 %
CVE-2025-662002.4.7 – 2.4.65Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfoMEDIUM 5.40.7 %
CVE-2025-650822.4.0 – 2.4.65Apache HTTP Server: CGI environment variable overrideMEDIUM 6.50.8 %
CVE-2025-597752.4.0 – 2.4.65Apache HTTP Server: NTLM Leakage on Windows through UNC SSRFHIGH 7.50.8 %
CVE-2025-557532.4.30 – < 2.4.66Apache HTTP Server: mod_md (ACME), unintended retry intervalsHIGH 7.50.4 %
CVE-2025-540902.4.64Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64MEDIUM 6.30.9 %
CVE-2025-530202.4.17 – 2.4.63Apache HTTP Server: HTTP/2 DoS by Memory IncreaseHIGH 7.55.0 %
CVE-2025-49812≤ 2.4.63Apache HTTP Server: mod_ssl TLS upgrade attackHIGH 7.40.6 %
CVE-2025-496302.4.26 – 2.4.63Apache HTTP Server: mod_proxy_http2 denial of serviceHIGH 7.51.4 %
CVE-2025-230482.4.35 – 2.4.63Apache HTTP Server: mod_ssl access control bypass with session resumptionCRITICAL 9.11.0 %
CVE-2024-433942.4.0 – 2.4.63Apache HTTP Server: SSRF on Windows due to UNC pathsHIGH 7.51.3 %
CVE-2024-472522.4 – 2.4.63Apache HTTP Server: mod_ssl error log variable escapingHIGH 7.50.8 %
CVE-2024-432042.4.0 – 2.4.63Apache HTTP Server: SSRF with mod_headers setting Content-Type headerHIGH 7.50.9 %
CVE-2024-425162.4.0 – 2.4.63Apache HTTP Server: HTTP response splittingHIGH 7.50.8 %
CVE-2024-407252.4.60 – 2.4.61Apache HTTP Server: source code disclosure with handlers configured via AddTypeMEDIUM 5.34.4 %
CVE-2024-408982.4.0 – 2.4.61Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on WindowsCRITICAL 9.11.6 %
CVE-2024-398842.4.60Apache HTTP Server: source code disclosure with handlers configured via AddTypeMEDIUM 6.20.9 %
CVE-2024-395732.4.0 – 2.4.59Apache HTTP Server: mod_rewrite proxy handler substitutionHIGH 7.535 %
CVE-2024-384772.4.0 – 2.4.59Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious requestHIGH 7.53.2 %
CVE-2024-384762.4.0 – 2.4.59Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirectCRITICAL 9.842 %
CVE-2024-384752.4.0 – 2.4.59Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.CRITICAL 9.1100 %KEV
CVE-2024-384742.4.0 – 2.4.59Apache HTTP Server weakness with encoded question marks in backreferencesCRITICAL 9.82.5 %
CVE-2024-384732.4.0 – 2.4.59Apache HTTP Server proxy encoding problemHIGH 8.126 %
CVE-2024-384722.4.0 – 2.4.59Apache HTTP Server on WIndows UNC SSRFHIGH 7.569 %
CVE-2024-363872.4.55 – 2.4.59Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2MEDIUM 5.41.7 %
CVE-2024-273162.4.17 – 2.4.58Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesHIGH 7.591 %
CVE-2024-247952.4.0 – 2.4.58Apache HTTP Server: HTTP Response Splitting in multiple modulesMEDIUM 6.32.9 %
CVE-2023-38709≤ 2.4.58Apache HTTP Server: HTTP response splittingHIGH 7.33.9 %
CVE-2023-31122≤ 2.4.57Apache HTTP Server: mod_macro buffer over-readHIGH 7.53.0 %
CVE-2023-436222.4.55 – 2.4.57Apache HTTP Server: DoS in HTTP/2 with initial windows size 0HIGH 7.569 %
CVE-2023-458022.4.17 – 2.4.57Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTMEDIUM 5.93.2 %
CVE-2023-275222.4.30 – 2.4.55Apache HTTP Server: mod_proxy_uwsgi HTTP response splittingHIGH 7.52.1 %
CVE-2023-256902.4.0 – 2.4.55Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxyCRITICAL 9.885 %
CVE-2022-37436< 2.4.55Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingMEDIUM 5.356 %
CVE-2022-367602.4 – 2.4.54Apache HTTP Server: mod_proxy_ajp Possible request smugglingCRITICAL 9.01.9 %
CVE-2006-200012.4 – 2.4.54Apache HTTP Server: mod_dav out of bounds read, or write of zero byteHIGH 7.53.5 %
CVE-2022-31813Apache HTTP Server 2.4 – 2.4.53mod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCRITICAL 9.83.5 %
CVE-2022-30556unspecified – 2.4.53Information Disclosure in mod_lua with websocketsHIGH 7.55.3 %
CVE-2022-305222.4.53mod_sed denial of serviceHIGH 7.590 %
CVE-2022-29404unspecified – 2.4.53Denial of service in mod_lua r:parsebodyHIGH 7.56.4 %
CVE-2022-28615Apache HTTP Server – 2.4.53Read beyond bounds in ap_strcmp_match()CRITICAL 9.16.3 %
CVE-2022-28614unspecified – 2.4.53read beyond bounds via ap_rwrite()MEDIUM 5.35.0 %
CVE-2022-28330Apache HTTP Server – 2.4.53read beyond bounds in mod_isapiMEDIUM 5.33.8 %
CVE-2022-26377Apache HTTP Server 2.4 – 2.4.53mod_proxy_ajp: Possible request smugglingHIGH 7.521 %
CVE-2022-239432.4 – 2.4.52mod_sed: Read/write beyond boundsCRITICAL 9.850 %
CVE-2022-22721Apache HTTP Server 2.4 – 2.4.52core: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCRITICAL 9.142 %
CVE-2022-22720Apache HTTP Server 2.4 – 2.4.52HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCRITICAL 9.828 %
CVE-2022-22719Apache HTTP Server 2.4 – 2.4.52mod_lua Use of uninitialized value of in r:parsebodyHIGH 7.569 %
CVE-2021-442242.4.7 – < Apache HTTP Server 2.4*Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierHIGH 8.282 %
CVE-2021-44790Apache HTTP Server 2.4 – 2.4.51Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCRITICAL 9.897 %
CVE-2021-42013Apache HTTP Server 2.4.49 ; Apache HTTP Server 2.4.50Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)CRITICAL 9.8100 %KEV
CVE-2021-41773Apache HTTP Server 2.4 2.4.49Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49CRITICAL 9.8100 %KEV
CVE-2021-415242.4.49null pointer dereference in h2 fuzzingHIGH 7.525 %
CVE-2021-40438Apache HTTP Server 2.4 – 2.4.48mod_proxy SSRFCRITICAL 9.0100 %KEV
CVE-2021-39275Apache HTTP Server 2.4 – 2.4.48ap_escape_quotes buffer overflowCRITICAL 9.839 %
CVE-2021-36160Apache HTTP Server 2.4 – 2.4.48mod_proxy_uwsgi out of bound readHIGH 7.563 %
CVE-2021-34798Apache HTTP Server 2.4 – 2.4.48NULL pointer dereference in httpd coreHIGH 7.565 %
CVE-2021-33193Apache HTTP Server 2.4 2.4.17 to 2.4.48Request splitting via HTTP/2 method injection and mod_proxyHIGH 7.546 %
CVE-2021-316182.4.47NULL pointer dereference on specially crafted HTTP/2 requestHIGH 7.551 %
CVE-2021-306412.4.46 ; 2.4.43 ; 2.4.41 ; …Unexpected URL matching with 'MergeSlashes OFF'MEDIUM 5.353 %
CVE-2021-266912.4.46 ; 2.4.43 ; 2.4.41 ; …Apache HTTP Server mod_session response handling heap overflowCRITICAL 9.868 %
CVE-2021-266902.4.46 ; 2.4.43 ; 2.4.41 ; …mod_session NULL pointer dereferenceHIGH 7.565 %
CVE-2020-354522.4.46 ; 2.4.43 ; 2.4.41 ; …mod_auth_digest possible stack overflow by one nul byteHIGH 7.355 %
CVE-2020-139502.4.46 ; 2.4.43 ; 2.4.41mod_proxy_http NULL pointer dereferenceHIGH 7.549 %
CVE-2020-139382.4.46 ; 2.4.43 ; 2.4.41 ; …Improper Handling of Insufficient PrivilegesMEDIUM 5.512 %
CVE-2019-175672.4.46 ; 2.4.43 ; 2.4.41 ; …mod_proxy_wstunnel tunneling of non Upgraded connectionsMEDIUM 5.360 %
CVE-2019-01972.4.34 to 2.4.38A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 oMEDIUM 4.28.6 %
CVE-2019-01962.4.17 to 2.4.38A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to aMEDIUM 5.320 %
CVE-2019-02202.4.0 to 2.4.38A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slasMEDIUM 5.318 %
CVE-2019-0190Apache HTTP Server 2.4.37A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause modHIGH 7.559 %
CVE-2018-17199Apache HTTP Server 2.4.0 to 2.4.37In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes sessHIGH 7.520 %
CVE-2018-171892.4.17 to 2.4.37In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that reMEDIUM 5.320 %
CVE-2018-117632.4.17 to 2.4.34In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPUMEDIUM 5.951 %
CVE-2016-4975Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23) ; Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31)mod_userdir CRLF injectionMEDIUM 6.120 %
CVE-2018-8011Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33)mod_md, DoS via Coredumps on specially crafted requestsHIGH 7.556 %
CVE-2018-1333Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33)DoS for HTTP/2 connections by crafted requestsHIGH 7.517 %
CVE-2018-13122.0.42 to 2.4.29In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not coCRITICAL 9.816 %
CVE-2018-13032.4.5 to 2.4.29A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while HIGH 7.570 %
CVE-2018-13022.4.17 to 2.4.29When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer poMEDIUM 5.913 %
CVE-2018-13012.2.0 to 2.4.29A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size liMEDIUM 5.915 %
CVE-2018-12832.4.0 to 2.4.29In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the defaMEDIUM 5.39.7 %
CVE-2017-157152.4.0 to 2.4.29In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a malicious filename, raHIGH 8.185 %
CVE-2017-157102.0.23 to 2.0.65 ; 2.2.0 to 2.2.34 ; 2.4.0 to 2.4.29In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the HIGH 7.517 %
CVE-2017-9798Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, oHIGH 7.595 %
CVE-2016-87432.2.0 to 2.2.31, 2.4.1 to 2.4.23Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response liHIGH 7.513 %
CVE-2016-21612.4.0 to 2.4.23In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continueHIGH 7.521 %
CVE-2016-07362.4.0 to 2.4.23In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possiblyHIGH 7.549 %
CVE-2017-76592.4.24, 2.4.25A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash HIGH 7.554 %
CVE-2017-97892.4.26When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has beenHIGH 7.59.6 %
CVE-2017-97882.2.0 to 2.2.33 ; 2.4.1 to 2.4.26In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initiCRITICAL 9.157 %
CVE-2017-76792.2.0 to 2.2.32 ; 2.4.0 to 2.4.25In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious CoCRITICAL 9.839 %
CVE-2017-76682.2.32 ; 2.4.24, 2.4.25The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()HIGH 7.557 %
CVE-2017-31692.2.0 to 2.2.32 ; 2.4.0 to 2.4.25In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_prCRITICAL 9.820 %
CVE-2017-31672.2.0 to 2.2.32 ; 2.4.0 to 2.4.25In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentCRITICAL 9.820 %
CVE-2016-87402.4.17 - 2.4.23The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrictHIGH 7.579 %