Most recent entries from all

ALSA-2021:1809 — Moderate: httpd:2.4 security, bug fix, and enhancement update

Affected: AlmaLinux:8: mod_http2, AlmaLinux:8: mod_md

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)

* httpd: mod_proxy_uwsgi buffer overflow (CVE-2020-11984)

* httpd: mod_http2 concurrent pool usage (CVE-2020-11993)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-05176

Withdrawn: BELL-CVE-2020-11984 — CVE-2020-11984 does not affect BellSoft software

Withdrawn by the publisher.

BIT-apache-2020-11984

Affected: Bitnami: apache

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

certfr-2020-avi-490 — De multiples vulnérabilités ont été découvertes dans Apache Server. Elles permettent à un attaquant de provoquer un dén…

certfr-2020-avi-490

cnvd-2020-46280

EUVD-2026-41004

fkie_cve-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

GHSA-7fcg-7xhc-3997

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

gsd-2020-11984

msrc_CVE-2020-11984 — Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

msrc_CVE-2020-11984

openSUSE-SU-2020:1285-1 — Security update for apache2

Security update for apache2

RHBA-2020:5280 — Red Hat Bug Fix Advisory: httpd24 bug fix and enhancement update

httpd: mod_proxy_uwsgi buffer overflow httpd: mod_http2 concurrent pool usage

SUSE-SU-2020:2311-1 — Security update for apache2

Security update for apache2

UBUNTU-CVE-2020-11984

Affected: Ubuntu:Pro:14.04:LTS: uwsgi, Ubuntu:Pro:16.04:LTS: uwsgi, Ubuntu:18.04:LTS: uwsgi, Ubuntu:20.04:LTS: apache2

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

WID-SEC-W-2023-0063 — Juniper Junos Space: Mehrere Schwachstellen

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Juniper Junos Space ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen und seine Privilegien zu erweitern.