https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:50:47.432951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:1809 ALSA-2021:1809 — Moderate: httpd:2.4 security, bug fix, and enhancement update 2026-10-04T12:50:47.746058+00:00

Affected: AlmaLinux:8: mod_http2, AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)

* httpd: mod_proxy_uwsgi buffer overflow (CVE-2020-11984)

* httpd: mod_http2 concurrent pool usage (CVE-2020-11993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-01564 bdu:2019-01564 2026-10-04T12:50:47.746166+00:00 bdu:2019-01564 https://cve.radiocsirt.org/vuln/bell-cve-2018-17199 Withdrawn: BELL-CVE-2018-17199 — CVE-2018-17199 does not affect BellSoft software 2026-10-04T12:50:47.746199+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-avi-031 certfr-2019-avi-031 — De multiples vulnérabilités ont été découvertes dans Apache Httpd. Elles permettent à un attaquant de provoquer un déni… 2026-10-04T12:50:47.746215+00:00 certfr-2019-avi-031 https://cve.radiocsirt.org/vuln/cnvd-2019-41283 cnvd-2019-41283 2026-10-04T12:50:47.746229+00:00 cnvd-2019-41283 https://cve.radiocsirt.org/vuln/euvd-2026-170109 EUVD-2026-170109 2026-10-04T12:50:47.746241+00:00 EUVD-2026-170109 https://cve.radiocsirt.org/vuln/fkie_cve-2018-17199 fkie_cve-2018-17199 2026-10-04T12:50:47.746250+00:00

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.

 https://cve.radiocsirt.org/vuln/ghsa-gxfm-3qhv-h52c GHSA-gxfm-3qhv-h52c 2026-10-04T12:50:47.746271+00:00

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.

 https://cve.radiocsirt.org/vuln/gsd-2018-17199 gsd-2018-17199 2026-10-04T12:50:47.746285+00:00 gsd-2018-17199 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0296-1 openSUSE-SU-2019:0296-1 — Security update for apache2 2026-10-04T12:50:47.746296+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhsa-2019:3932 RHSA-2019:3932 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6 2026-10-04T12:50:47.746313+00:00

openssl: timing side channel attack in the DSA signature algorithm openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) httpd: mod_http2: DoS via slow, unneeded request bodies httpd: mod_session_cookie does not respect expiry time httpd: mod_http2: read-after-free on a string compare httpd: mod_http2: possible crash on late upgrade httpd: mod_auth_digest: access control bypass due to race condition HTTP/2: large amount of data requests leads to denial of service HTTP/2: flood using PRIORITY frames results in excessive resource consumption HTTP/2: 0-length headers lead to denial of service HTTP/2: request for large response leads to denial of service

 https://cve.radiocsirt.org/vuln/suse-su-2019:0498-1 SUSE-SU-2019:0498-1 — Security update for apache2 2026-10-04T12:50:47.746347+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-17199 UBUNTU-CVE-2018-17199 2026-10-04T12:50:47.746362+00:00

Affected: Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2, Ubuntu:18.04:LTS: apache2

In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.