CVE catalog

CVE-2024-40725

Apache HTTP Server vulnerability

[CVE catalog]

A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "AddType" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted. Users are recommended to upgrade to version 2.4.62, which fixes this issue.

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
4.42% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securityapache22.4.69-1~deb13u1Fixed[CVE-2024-40725]
Debiantrixieapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debiantrixieapache22.4.68-1~deb13u1Fixed[CVE-2024-40725]
Debiansidapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debiansidapache22.4.69-1Fixed[CVE-2024-40725]
Debianforkyapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debianforkyapache22.4.69-1Fixed[CVE-2024-40725]
Debianbookworm-securityapache22.4.67-1~deb12u3Fixed[CVE-2024-40725]
Debianbookwormapache22.4.62-1~deb12u1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debianbookwormapache22.4.68-1~deb12u1Fixed[CVE-2024-40725]

Showing 10 fix observations. All 114 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedapache22.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache22.4.62-1~deb12u1UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-bin2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-data2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-dev2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-doc2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-ssl-dev2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-suexec-custom2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-suexec-pristine2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedapache2-utils2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibapache2-mod-md2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedlibapache2-mod-proxy-uwsgi2.4.58-1ubuntu8.4UnknownSource applicability is not establishedProvider not reported
Alpine3.17apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.18apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.19apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.20apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.21apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.22apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.23apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Alpine3.24apache22.4.62-r0UnknownSource applicability is not established[ALPINE-CVE-2024-40725]
Debianbookwormapache22.4.62-1~deb12u1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debianbookwormapache22.4.68-1~deb12u1Fixed[CVE-2024-40725]
Debianbookworm-securityapache22.4.67-1~deb12u3Fixed[CVE-2024-40725]
Debianforkyapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debianforkyapache22.4.69-1Fixed[CVE-2024-40725]
Debiansidapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debiansidapache22.4.69-1Fixed[CVE-2024-40725]
Debiantrixieapache22.4.62-1FixedDistribution-reported fixed boundary[CVE-2024-40725]
Debiantrixieapache22.4.68-1~deb13u1Fixed[CVE-2024-40725]
Debiantrixie-securityapache22.4.69-1~deb13u1Fixed[CVE-2024-40725]
Opensuseleap 15.5apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Opensuseleap 15.6apache22.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-devel2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-event2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-manual2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-prefork2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-utils2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensuseleap 15.6apache2-worker2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Opensusetumbleweedapache22.4.62-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:14245-1]
Suselinux enterprise high performance computing 15 sp4-esposapache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise high performance computing 15 sp4-ltssapache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise module for basesystem 15 sp5apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise module for basesystem 15 sp6apache22.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for basesystem 15 sp6apache2-prefork2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for package hub 15 sp5apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise module for package hub 15 sp6apache22.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for package hub 15 sp6apache2-event2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for server applications 15 sp5apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise module for server applications 15 sp6apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise module for server applications 15 sp6apache2-devel2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for server applications 15 sp6apache2-utils2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise module for server applications 15 sp6apache2-worker2.4.58-150600.5.26.1UnknownSource applicability is not established[SUSE-SU-2024:3742-1]
Suselinux enterprise server 12 sp5-ltssapache22.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Suselinux enterprise server 12 sp5-ltssapache2-tls132.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Suselinux enterprise server 15 sp4-ltssapache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise server for sap applications 12 sp5apache22.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Suselinux enterprise server for sap applications 12 sp5apache2-tls132.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Suselinux enterprise server for sap applications 15 sp4apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Suselinux enterprise server ltss extended security 12 sp5apache22.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Suselinux enterprise server ltss extended security 12 sp5apache2-tls132.4.51-35.63.1UnknownSource applicability is not established[SUSE-SU-2024:3750-1]
Susemanager proxy 4.3apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Susemanager server 4.3apache22.4.51-150400.6.37.1UnknownSource applicability is not established[SUSE-SU-2024:3864-1]
Ubuntu20.04apache22.4.41-1ubuntu1UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu1UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu2UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.1UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.10UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.11UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.12UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.13UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.14UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.15UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.16UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.17UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.19UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.20UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.21UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.3UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.4UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.5UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.6UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.7UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.8UnknownSource applicability is not established[USN-6902-1]
Ubuntu20.04apache22.4.41-4ubuntu3.9UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.48-3.1ubuntu3UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.48-3.1ubuntu4UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.51-2ubuntu1UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu1UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu2UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.1UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.10UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.11UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.12UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.2UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.3UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.4UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.5UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.6UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.7UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.8UnknownSource applicability is not established[USN-6902-1]
Ubuntu22.04apache22.4.52-1ubuntu4.9UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.57-2ubuntu2UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.57-2ubuntu3UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu1UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu2UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu6UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu7UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu8UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu8.1UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu8.2UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu8.3UnknownSource applicability is not established[USN-6902-1]
Ubuntu24.04apache22.4.58-1ubuntu8.4UnknownSource applicability is not established[USN-6902-1]
Original provider fields
{
  "package_releases": [
    {
      "name": "apache2",
      "status": "fixed",
      "release": "sid",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "forky",
      "version": "2.4.69-1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "trixie",
      "version": "2.4.68-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.4.69-1~deb13u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.4.68-1~deb12u1"
    },
    {
      "name": "apache2",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.4.67-1~deb12u3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.62-1"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.62-1"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.62-1"
    },
    {
      "bug": null,
      "name": "apache2",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.62-1~deb12u1"
    }
  ],
  "distribution_packages": [
    {
      "name": "apache2",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-bin",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-data",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-dev",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-doc",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-ssl-dev",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-suexec-custom",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-suexec-pristine",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2-utils",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-md",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "libapache2-mod-proxy-uwsgi",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "fixed_version": "2.4.62-1~deb12u1",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2024-40725",
      "fixed_version": "2.4.62-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2024-40725",
      "provider_updated_at": "2026-09-15T08:17:48.472400822Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.41-4ubuntu3.21"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "2.4.41-1ubuntu1",
        "2.4.41-4ubuntu1",
        "2.4.41-4ubuntu2",
        "2.4.41-4ubuntu3",
        "2.4.41-4ubuntu3.1",
        "2.4.41-4ubuntu3.3",
        "2.4.41-4ubuntu3.4",
        "2.4.41-4ubuntu3.5",
        "2.4.41-4ubuntu3.6",
        "2.4.41-4ubuntu3.7",
        "2.4.41-4ubuntu3.8",
        "2.4.41-4ubuntu3.9",
        "2.4.41-4ubuntu3.10",
        "2.4.41-4ubuntu3.11",
        "2.4.41-4ubuntu3.12",
        "2.4.41-4ubuntu3.13",
        "2.4.41-4ubuntu3.14",
        "2.4.41-4ubuntu3.15",
        "2.4.41-4ubuntu3.16",
        "2.4.41-4ubuntu3.17",
        "2.4.41-4ubuntu3.19",
        "2.4.41-4ubuntu3.20"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6902-1",
      "fixed_version": "2.4.41-4ubuntu3.21",
      "provider_source": "pypi",
      "provider_record_id": "USN-6902-1",
      "provider_updated_at": "2026-04-27T17:21:13.215487Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.52-1ubuntu4.12"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "2.4.48-3.1ubuntu3",
        "2.4.48-3.1ubuntu4",
        "2.4.51-2ubuntu1",
        "2.4.52-1ubuntu1",
        "2.4.52-1ubuntu2",
        "2.4.52-1ubuntu4",
        "2.4.52-1ubuntu4.1",
        "2.4.52-1ubuntu4.2",
        "2.4.52-1ubuntu4.3",
        "2.4.52-1ubuntu4.4",
        "2.4.52-1ubuntu4.5",
        "2.4.52-1ubuntu4.6",
        "2.4.52-1ubuntu4.7",
        "2.4.52-1ubuntu4.8",
        "2.4.52-1ubuntu4.9",
        "2.4.52-1ubuntu4.10",
        "2.4.52-1ubuntu4.11"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6902-1",
      "fixed_version": "2.4.52-1ubuntu4.12",
      "provider_source": "pypi",
      "provider_record_id": "USN-6902-1",
      "provider_updated_at": "2026-04-27T17:21:13.215487Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-1ubuntu8.4"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "2.4.57-2ubuntu2",
        "2.4.57-2ubuntu3",
        "2.4.58-1ubuntu1",
        "2.4.58-1ubuntu2",
        "2.4.58-1ubuntu6",
        "2.4.58-1ubuntu7",
        "2.4.58-1ubuntu8",
        "2.4.58-1ubuntu8.1",
        "2.4.58-1ubuntu8.2",
        "2.4.58-1ubuntu8.3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-6902-1",
      "fixed_version": "2.4.58-1ubuntu8.4",
      "provider_source": "pypi",
      "provider_record_id": "USN-6902-1",
      "provider_updated_at": "2026-04-27T17:21:13.215487Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-prefork",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-event",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-devel",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-utils",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-worker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-devel",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-event",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-manual",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-prefork",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-utils",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-worker",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.58-150600.5.26.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3742-1",
      "fixed_version": "2.4.58-150600.5.26.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3742-1",
      "provider_updated_at": "2026-02-04T04:27:40.358821Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for server applications 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-150400.6.37.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3864-1",
      "fixed_version": "2.4.51-150400.6.37.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3864-1",
      "provider_updated_at": "2026-02-04T03:56:56.965073Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.62-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:14245-1",
      "fixed_version": "2.4.62-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:14245-1",
      "provider_updated_at": "2026-02-04T02:15:09.048385Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-tls13",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-tls13",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    },
    {
      "name": "apache2-tls13",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.51-35.63.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:3750-1",
      "fixed_version": "2.4.51-35.63.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:3750-1",
      "provider_updated_at": "2025-05-02T04:36:56.965959Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [apache2]Unknown
    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-bin]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-data]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-dev]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-doc]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · all · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-ssl-dev]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-suexec-custom]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-suexec-pristine]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [apache2-utils]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [libapache2-mod-md]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

  • [libapache2-mod-proxy-uwsgi]Unknown

    Source package: [apache2]

    Details (4)

    • 2.4.68-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.68-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · amd64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

    • 2.4.67-1~deb12u3 · arm64 · bookworm-security

      Fixed · Fixed: 2.4.62-1~deb12u1

      usn · apache2 · debian · bookworm; usn · apache2 · debian · 12

[Debian 13 (Trixie)]

  • [apache2]Unknown
    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-bin]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-data]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-dev]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-doc]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · all · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · all · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · all · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-ssl-dev]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-suexec-custom]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-suexec-pristine]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

  • [apache2-utils]Unknown

    Source package: [apache2]

    Details (5)

    • 2.4.68-1~deb13u1 · amd64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.68-1~deb13u1 · arm64 · trixie

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.67-1~deb13u3 · arm64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

    • 2.4.69-1~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 2.4.62-1

      usn · apache2 · debian · 13

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]