CVE catalog

CVE-2020-35452

apache2 affected and fixed versions

[CVE catalog]

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
54.81% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityapache22.4.69-1~deb13u1Fixed[CVE-2020-35452]
Debiantrixieapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debiantrixieapache22.4.68-1~deb13u1Fixed[CVE-2020-35452]
Debiansidapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debiansidapache22.4.69-1Fixed[CVE-2020-35452]
Debianforkyapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debianforkyapache22.4.69-1Fixed[CVE-2020-35452]
Debianbookworm-securityapache22.4.67-1~deb12u3Fixed[CVE-2020-35452]
Debianbookwormapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debianbookwormapache22.4.68-1~deb12u1Fixed[CVE-2020-35452]

Showing 10 fix observations. All 90 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedapache22.4.46-6UnknownSource applicability is not establishedProvider not reported
Alpine3.10apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.11apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.12apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.13apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.14apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.15apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.16apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.17apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.18apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.19apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.20apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.21apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.22apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.23apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Alpine3.24apache22.4.48-r0UnknownSource applicability is not established[ALPINE-CVE-2020-35452]
Debianbookwormapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debianbookwormapache22.4.68-1~deb12u1Fixed[CVE-2020-35452]
Debianbookworm-securityapache22.4.67-1~deb12u3Fixed[CVE-2020-35452]
Debianforkyapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debianforkyapache22.4.69-1Fixed[CVE-2020-35452]
Debiansidapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debiansidapache22.4.69-1Fixed[CVE-2020-35452]
Debiantrixieapache22.4.46-6FixedDistribution-reported fixed boundary[CVE-2020-35452]
Debiantrixieapache22.4.68-1~deb13u1Fixed[CVE-2020-35452]
Debiantrixie-securityapache22.4.69-1~deb13u1Fixed[CVE-2020-35452]
Susehpe helion openstack 8apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise point of sale 11 sp3apache22.2.34-70.35.1UnknownSource applicability is not established[SUSE-SU-2021:14749-1]
Suselinux enterprise server 11 sp4-ltssapache22.2.34-70.35.1UnknownSource applicability is not established[SUSE-SU-2021:14749-1]
Suselinux enterprise server 12 sp2-bclapache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server 12 sp3-bclapache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server 12 sp3-ltssapache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server 12 sp4-ltssapache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server 12 sp5apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server for sap applications 12 sp3apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server for sap applications 12 sp4apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise server for sap applications 12 sp5apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suselinux enterprise software development kit 12 sp5apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suseopenstack cloud 8apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suseopenstack cloud 9apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suseopenstack cloud crowbar 8apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Suseopenstack cloud crowbar 9apache22.4.23-29.74.1UnknownSource applicability is not established[SUSE-SU-2021:2006-1]
Ubuntu18.04apache22.4.27-2ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.10UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.11UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.12UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.13UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.14UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.16UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.2UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.3UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.4UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.5UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.6UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.7UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu18.04apache22.4.29-1ubuntu4.8UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-4ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-4ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-4ubuntu3.1UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntu20.04apache22.4.41-4ubuntu3.3UnknownSource applicability is not established[UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.12-2ubuntu2UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.17-1ubuntu1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.17-2ubuntu1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.17-3ubuntu1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-1ubuntu1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu2UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.10UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.12UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.13UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.14UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.15UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.17UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.17+esm1UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.2UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.3UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.4UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.5UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.7UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.8UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Ubuntuproapache22.4.18-2ubuntu3.9UnknownSource applicability is not established[USN-4994-2][UBUNTU-CVE-2020-35452]
Original provider fields
{
  "package_releases": [
    {
      "name": "apache2",
      "status": "fixed",
      "release": "sid",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "forky",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "trixie",
      "version": "2.4.68-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.4.69-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.4.68-1~deb12u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.4.67-1~deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.46-6"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.46-6"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.46-6"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.46-6"
    }
  ],
  "distribution_packages": [
    {
      "name": "apache2",
      "fixed_version": "2.4.46-6",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.10",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.11",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.48-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-35452",
      "fixed_version": "2.4.48-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-35452",
      "provider_updated_at": "2026-10-26T11:17:55.171907644Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.18-2ubuntu3.17+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.4.12-2ubuntu2",
        "2.4.17-1ubuntu1",
        "2.4.17-2ubuntu1",
        "2.4.17-3ubuntu1",
        "2.4.18-1ubuntu1",
        "2.4.18-2ubuntu1",
        "2.4.18-2ubuntu2",
        "2.4.18-2ubuntu3",
        "2.4.18-2ubuntu3.1",
        "2.4.18-2ubuntu3.2",
        "2.4.18-2ubuntu3.3",
        "2.4.18-2ubuntu3.4",
        "2.4.18-2ubuntu3.5",
        "2.4.18-2ubuntu3.7",
        "2.4.18-2ubuntu3.8",
        "2.4.18-2ubuntu3.9",
        "2.4.18-2ubuntu3.10",
        "2.4.18-2ubuntu3.12",
        "2.4.18-2ubuntu3.13",
        "2.4.18-2ubuntu3.14",
        "2.4.18-2ubuntu3.15",
        "2.4.18-2ubuntu3.17"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-4994-2",
      "fixed_version": "2.4.18-2ubuntu3.17+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-4994-2",
      "provider_updated_at": "2026-06-29T13:49:26.442080165Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.18-2ubuntu3.17+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.4.12-2ubuntu2",
        "2.4.17-1ubuntu1",
        "2.4.17-2ubuntu1",
        "2.4.17-3ubuntu1",
        "2.4.18-1ubuntu1",
        "2.4.18-2ubuntu1",
        "2.4.18-2ubuntu2",
        "2.4.18-2ubuntu3",
        "2.4.18-2ubuntu3.1",
        "2.4.18-2ubuntu3.2",
        "2.4.18-2ubuntu3.3",
        "2.4.18-2ubuntu3.4",
        "2.4.18-2ubuntu3.5",
        "2.4.18-2ubuntu3.7",
        "2.4.18-2ubuntu3.8",
        "2.4.18-2ubuntu3.9",
        "2.4.18-2ubuntu3.10",
        "2.4.18-2ubuntu3.12",
        "2.4.18-2ubuntu3.13",
        "2.4.18-2ubuntu3.14",
        "2.4.18-2ubuntu3.15",
        "2.4.18-2ubuntu3.17"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-35452",
      "fixed_version": "2.4.18-2ubuntu3.17+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-35452",
      "provider_updated_at": "2026-04-22T12:40:02.597317Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.29-1ubuntu4.16"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "2.4.27-2ubuntu3",
        "2.4.29-1ubuntu1",
        "2.4.29-1ubuntu2",
        "2.4.29-1ubuntu3",
        "2.4.29-1ubuntu4",
        "2.4.29-1ubuntu4.1",
        "2.4.29-1ubuntu4.2",
        "2.4.29-1ubuntu4.3",
        "2.4.29-1ubuntu4.4",
        "2.4.29-1ubuntu4.5",
        "2.4.29-1ubuntu4.6",
        "2.4.29-1ubuntu4.7",
        "2.4.29-1ubuntu4.8",
        "2.4.29-1ubuntu4.10",
        "2.4.29-1ubuntu4.11",
        "2.4.29-1ubuntu4.12",
        "2.4.29-1ubuntu4.13",
        "2.4.29-1ubuntu4.14"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-35452",
      "fixed_version": "2.4.29-1ubuntu4.16",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-35452",
      "provider_updated_at": "2026-04-22T12:40:02.597317Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.41-4ubuntu3.3"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.4.41-1ubuntu1",
        "2.4.41-4ubuntu1",
        "2.4.41-4ubuntu2",
        "2.4.41-4ubuntu3",
        "2.4.41-4ubuntu3.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-35452",
      "fixed_version": "2.4.41-4ubuntu3.3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-35452",
      "provider_updated_at": "2026-04-22T12:40:02.597317Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.34-70.35.1"
            }
          ]
        }
      ],
      "release": "linux enterprise point of sale 11 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:14749-1",
      "fixed_version": "2.2.34-70.35.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:14749-1",
      "provider_updated_at": "2026-02-04T04:37:12.132762Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.34-70.35.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 11 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:14749-1",
      "fixed_version": "2.2.34-70.35.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:14749-1",
      "provider_updated_at": "2026-02-04T04:37:12.132762Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "hpe helion openstack 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "openstack cloud 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 8",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "openstack cloud crowbar 9",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise software development kit 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp3-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.23-29.74.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2021:2006-1",
      "fixed_version": "2.4.23-29.74.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2021:2006-1",
      "provider_updated_at": "2026-02-04T02:13:51.469341Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [apache2]Unknown
    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-bin]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-data]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-dev]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-doc]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-ssl-dev]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-suexec-custom]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-suexec-pristine]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [apache2-utils]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [libapache2-mod-md]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

  • [libapache2-mod-proxy-uwsgi]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · bookworm; dsa · apache2 · debian · 12

[Debian 13 (Trixie)]

  • [apache2]Unknown
    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-bin]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-data]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-dev]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-doc]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-ssl-dev]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-suexec-custom]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-suexec-pristine]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

  • [apache2-utils]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.46-6

      dsa · apache2 · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]