Apache Http Server
Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:apache_http_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Apache Http Server (9f679126-9eb3-54af-8a67-f6d85cc70b2e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9490 |
vulnerable | 2026-06-08 05:28:02.018659 |
Details available
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resource afterwards. Configuring the HTTP/2 feature via "H2Push off" will mitigate this vulnerability for unpatched servers.
Published: 2020-08-07T15:24:49.000Z
Updated: 2024-08-04T10:26:16.299Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11993 |
vulnerable | 2026-06-08 05:17:56.056850 |
Details available
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.
Published: 2020-08-07T15:32:55.000Z
Updated: 2024-08-04T11:48:57.265Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11985 |
vulnerable | 2026-06-08 05:17:56.010690 |
Details available
IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using proxying with mod_remoteip and certain mod_rewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively allocated a low severity CVE in 2020.
Published: 2020-08-07T15:36:31.000Z
Updated: 2024-08-04T11:48:58.232Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11984 |
vulnerable | 2026-06-08 05:17:55.997628 |
Details available
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Published: 2020-08-07T15:27:15.000Z
Updated: 2024-08-04T11:48:57.555Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10098 |
vulnerable | 2026-06-08 05:12:22.242480 |
Details available
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
Published: 2019-09-25T16:39:23.000Z
Updated: 2024-08-04T22:10:09.765Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10097 |
vulnerable | 2026-06-08 05:12:22.236390 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10092 |
vulnerable | 2026-06-08 05:12:22.222891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10082 |
vulnerable | 2026-06-08 05:12:22.122889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10081 |
vulnerable | 2026-06-08 05:12:22.121700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.