https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:58:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-02150 bdu:2017-02150 https://cve.radiocsirt.org/vuln/bdu:2017-02150 https://cve.radiocsirt.org/vuln/bell-cve-2017-7668 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2017-7668 https://cve.radiocsirt.org/vuln/certfr-2017-avi-218 certfr-2017-avi-218 https://cve.radiocsirt.org/vuln/certfr-2017-avi-218 https://cve.radiocsirt.org/vuln/cnvd-2017-11803 cnvd-2017-11803 https://cve.radiocsirt.org/vuln/cnvd-2017-11803 https://cve.radiocsirt.org/vuln/euvd-2026-74886 EUVD-2026-74886 https://cve.radiocsirt.org/vuln/euvd-2026-74886 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7668 <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-7668 https://cve.radiocsirt.org/vuln/ghsa-mcc7-rcr3-2rgr <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> https://cve.radiocsirt.org/vuln/ghsa-mcc7-rcr3-2rgr https://cve.radiocsirt.org/vuln/gsd-2017-7668 gsd-2017-7668 https://cve.radiocsirt.org/vuln/gsd-2017-7668 https://cve.radiocsirt.org/vuln/rhsa-2017:2479 <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2479 https://cve.radiocsirt.org/vuln/rhsa-2017:2483 <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_http2 NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> <p>httpd: ap_get_basic_auth_pw() authentication bypass httpd: mod_ssl NULL pointer dereference httpd: mod_http2 NULL pointer dereference httpd: ap_find_token() buffer overread httpd: mod_mime buffer overread httpd: Uninitialized memory reflection in mod_auth_digest</p> https://cve.radiocsirt.org/vuln/rhsa-2017:2483 https://cve.radiocsirt.org/vuln/suse-su-2017:2907-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2017:2907-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7668 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2</p> <p>The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-7668 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstelle in Apple Mac OS ausnutzen, um Code mit Kernel Privilegien auszuführen, Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0370