FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-05-02 10:37:19 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
8e6f684b-f333-11ee-a573-84a93843eb75Apache httpd -- multiple vulnerabilities

The Apache httpd project reports:

HTTP/2 DoS by memory exhaustion on endless continuation frames

HTTP Response Splitting in multiple modules


Discovery 2024-04-04
Entry 2024-04-05
apache24
< 2.4.59

mod_http2
< 2.0.27

CVE-2024-27316
CVE-2024-24795
CVE-2024-38709
https://downloads.apache.org/httpd/CHANGES_2.4.59
f923205f-6e66-11ee-85eb-84a93843eb75Apache httpd -- Multiple vulnerabilities

The Apache httpd project reports:

  • CVE-2023-45802: Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST
  • CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with initial windows size 0
  • CVE-2023-31122: mod_macro buffer over-read

Discovery 2023-10-19
Entry 2023-10-19
apache24
< 2.4.58

CVE-2023-45802
CVE-2023-43622
CVE-2023-31122
https://dlcdn.apache.org/httpd/CHANGES_2.4.58