https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:46:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00102 bdu:2018-00102 https://cve.radiocsirt.org/vuln/bdu:2018-00102 https://cve.radiocsirt.org/vuln/bell-cve-2017-9788 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-9788 https://cve.radiocsirt.org/vuln/certfr-2017-avi-385 certfr-2017-avi-385 https://cve.radiocsirt.org/vuln/certfr-2017-avi-385 https://cve.radiocsirt.org/vuln/cnvd-2017-23346 cnvd-2017-23346 https://cve.radiocsirt.org/vuln/cnvd-2017-23346 https://cve.radiocsirt.org/vuln/euvd-2026-166806 EUVD-2026-166806 https://cve.radiocsirt.org/vuln/euvd-2026-166806 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9788 <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9788 https://cve.radiocsirt.org/vuln/ghsa-w97h-p5ff-7q69 <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-w97h-p5ff-7q69 https://cve.radiocsirt.org/vuln/gsd-2017-9788 gsd-2017-9788 https://cve.radiocsirt.org/vuln/gsd-2017-9788 https://cve.radiocsirt.org/vuln/rhsa-2017:2478 <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2478 https://cve.radiocsirt.org/vuln/rhsa-2017:2479 <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2479 https://cve.radiocsirt.org/vuln/suse-su-2017:1961-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1961-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9788 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type &#39;Digest&#39; was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no &#39;=&#39; assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9788 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370