https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:09:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01454 bdu:2021-01454 https://cve.radiocsirt.org/vuln/bdu:2021-01454 https://cve.radiocsirt.org/vuln/bell-cve-2018-1302 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-1302 https://cve.radiocsirt.org/vuln/certfr-2019-avi-657 certfr-2019-avi-657 https://cve.radiocsirt.org/vuln/certfr-2019-avi-657 https://cve.radiocsirt.org/vuln/cnvd-2018-06535 cnvd-2018-06535 https://cve.radiocsirt.org/vuln/cnvd-2018-06535 https://cve.radiocsirt.org/vuln/euvd-2026-182383 EUVD-2026-182383 https://cve.radiocsirt.org/vuln/euvd-2026-182383 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1302 <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1302 https://cve.radiocsirt.org/vuln/ghsa-x452-9h59-82pg <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> https://cve.radiocsirt.org/vuln/ghsa-x452-9h59-82pg https://cve.radiocsirt.org/vuln/gsd-2018-1302 gsd-2018-1302 https://cve.radiocsirt.org/vuln/gsd-2018-1302 https://cve.radiocsirt.org/vuln/rhsa-2019:0366 <p>libdb: Reads DB_CONFIG from the current working directory httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values httpd: &lt;FilesMatch&gt; bypass with a trailing newline in the file name openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications httpd: Out of bounds access after failure in reading the HTTP request httpd: Use-after-free on HTTP/2 stream shutdown httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS httpd: Weak Digest auth nonce generation in mod_auth_digest httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS mod_jk: connector path traversal due to mishandled HTTP requests in httpd httpd: DoS for HTTP/2 connections by continuous SETTINGS frames nghttp2: Null pointer dereference when too large ALTSVC frame is received</p> <p>libdb: Reads DB_CONFIG from the current working directory httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values httpd: &lt;FilesMatch&gt; bypass with a trailing newline in the file name openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications httpd: Out of bounds access after failure in reading the HTTP request httpd: Use-after-free on HTTP/2 stream shutdown httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause DoS httpd: Weak Digest auth nonce generation in mod_auth_digest httpd: mod_http2: Too much time allocated to workers, possibly leading to DoS mod_jk: connector path traversal due to mishandled HTTP requests in httpd httpd: DoS for HTTP/2 connections by continuous SETTINGS frames nghttp2: Null pointer dereference when too large ALTSVC frame is received</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0366 https://cve.radiocsirt.org/vuln/suse-su-2018:1161-1 <p>Security update for apache2</p> <p>Security update for apache2</p> https://cve.radiocsirt.org/vuln/suse-su-2018:1161-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1302 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apache2</p> <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: apache2</p> <p>When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2.4.30 could have written a NULL pointer potentially to an already freed memory. The memory pools maintained by the server make this vulnerability hard to trigger in usual configurations, the reporter and the team could not reproduce it outside debug builds, so it is classified as low risk.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-1302