https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:03:09.024299+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:4751 ALSA-2020:4751 — Moderate: httpd:2.4 security, bug fix, and enhancement update 2026-10-03T10:03:09.207400+00:00

Affected: AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

The following packages have been upgraded to a later upstream version: mod_http2 (1.15.7). (BZ#1814236)

Security Fix(es):

* httpd: memory corruption on early pushes (CVE-2019-10081)

* httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)

* httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

* httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)

* httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

* httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)

* httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)

* httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

* httpd: mod_rewrite potential open redirect (CVE-2019-10098)

* httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2019-03632 bdu:2019-03632 2026-10-03T10:03:09.207473+00:00 bdu:2019-03632 https://cve.radiocsirt.org/vuln/bell-cve-2019-10081 Withdrawn: BELL-CVE-2019-10081 — CVE-2019-10081 does not affect BellSoft software 2026-10-03T10:03:09.207491+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2019-avi-402 certfr-2019-avi-402 — De multiples vulnérabilités ont été découvertes dans Apache Httpd. Elles permettent à un attaquant de provoquer un prob… 2026-10-03T10:03:09.207506+00:00 certfr-2019-avi-402 https://cve.radiocsirt.org/vuln/euvd-2026-53322 EUVD-2026-53322 2026-10-03T10:03:09.207521+00:00 EUVD-2026-53322 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10081 fkie_cve-2019-10081 2026-10-03T10:03:09.207531+00:00

HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.

 https://cve.radiocsirt.org/vuln/ghsa-c2vp-q2q2-hm8m GHSA-c2vp-q2q2-hm8m 2026-10-03T10:03:09.207554+00:00

HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.

 https://cve.radiocsirt.org/vuln/gsd-2019-10081 gsd-2019-10081 2026-10-03T10:03:09.207569+00:00 gsd-2019-10081 https://cve.radiocsirt.org/vuln/opensuse-su-2019:2051-1 openSUSE-SU-2019:2051-1 — Security update for apache2 2026-10-03T10:03:09.207579+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/rhsa-2020:1336 RHSA-2020:1336 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP2 security update 2026-10-03T10:03:09.207599+00:00

openssl: side-channel weak encryption vulnerability openssl: information disclosure in fork() openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey httpd: memory corruption on early pushes httpd: read-after-free in h2 connection shutdown httpd: limited cross-site scripting in mod_proxy error page httpd: null-pointer dereference in mod_remoteip httpd: mod_rewrite potential open redirect httpd: mod_rewrite configurations vulnerable to open redirect

 https://cve.radiocsirt.org/vuln/suse-su-2019:2237-1 SUSE-SU-2019:2237-1 — Security update for apache2 2026-10-03T10:03:09.207625+00:00

Security update for apache2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10081 UBUNTU-CVE-2019-10081 2026-10-03T10:03:09.207642+00:00

Affected: Ubuntu:18.04:LTS: apache2

HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1591 WID-SEC-W-2024-1591 — Juniper JUNOS: Mehrere Schwachstellen 2026-10-03T10:03:09.207661+00:00

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um einen Denial of Service zu verursachen, Informationen offenzulegen, Privilegien zu erweitern und Sicherheitsmechanismen inklusive zu umgehen.