The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1401:01 advisory.

    * httpd: memory corruption on early pushes (CVE-2019-10081)
      * httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)
      * httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)
      * httpd: mod_rewrite configurations vulnerable to open redirect (CVE-2020-1927)
      * httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)
      * httpd: mod_http2: read-after-free on a string compare (CVE-2019-0196)
      * httpd: mod_http2: possible crash on late upgrade (CVE-2019-0197)
      * httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)
      * httpd: mod_rewrite potential open redirect (CVE-2019-10098)
      * httpd: mod_proxy_ftp use of uninitialized value (CVE-2020-1934)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4126 advisory.

    The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a     recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module.

    Security Fix(es):

    * httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)

    * httpd: mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)

    * httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

    * httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)

    * httpd: URL normalization inconsistency (CVE-2019-0220)

    * httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Bug Fix(es):

    * `ExtendedStatus Off` directive when using mod_systemd causes systemctl to hang (BZ#1669213)

    * httpd can not be started with mod_md enabled (BZ#1673019)

    * Rebuild metapackage with latest scl-utils (BZ#1696527)

    * fix a regression introduced in r1740928 (BZ#1707636)

    * duplicated cookie in Apache httpd with mod_session (BZ#1725922)

    * Unexpected OCSP in proxy SSL connection (BZ#1744120)

    Enhancement(s):

    * RFE: updated collection for httpd 2.4 (BZ#1726706)

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Software Collections 3.4 Release     Notes linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A cross-site scripting vulnerability was found in Apache httpd, affecting the mod_proxy error page. Under certain circumstances, a crafted link could inject content into the HTML displayed in the error page, potentially leading to client-side exploitation.(CVE-2019-10092)

A vulnerability was discovered in Apache httpd, in mod_remoteip. A trusted proxy using the 'PROXY' protocol could send specially crafted headers that can cause httpd to experience a stack buffer overflow or NULL pointer dereference, leading to a crash or other potential consequences.\n\nThis issue could only be exploited by configured trusted intermediate proxy servers. HTTP clients such as browsers could not exploit the vulnerability.(CVE-2019-10097)

A vulnerability was discovered in Apache httpd, in mod_rewrite.
Certain self-referential mod_rewrite rules could be fooled by encoded newlines, causing them to redirect to an unexpected location. An attacker could abuse this flaw in a phishing attack or as part of a client-side attack on browsers.(CVE-2019-10098)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1337 advisory.

    This release adds the new Apache HTTP Server 2.4.37 Service Pack 2 packages that are part of the JBoss     Core Services offering.

    This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service     Pack 1 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most     significant bug fixes and enhancements included in this release.

    Security Fix(es):

    * openssl: side-channel weak encryption vulnerability (CVE-2019-1547)

    * httpd: memory corruption on early pushes (CVE-2019-10081)

    * httpd: read-after-free in h2 connection shutdown (CVE-2019-10082)

    * httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)

    * openssl: information disclosure in fork() (CVE-2019-1549)

    * openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey (CVE-2019-1563)

    * httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

    * httpd: mod_rewrite potential open redirect (CVE-2019-10098)

    * httpd: mod_rewrite configurations vulnerable to open redirect(CVE-2020-1927)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an unexpected URL within the     request URL.(CVE-2019-10098)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an an unexpected URL within the     request URL.(CVE-2020-1927)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited     cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link     on the error page to be malformed and instead point to     a page of their choice. This would only be exploitable     where a server was set up with proxying enabled but was     misconfigured in such a way that the Proxy Error page     was displayed.(CVE-2019-10092)

  - Memory leak in the winnt_accept function in     server/mpm/winnt/child.c in the WinNT MPM in the Apache     HTTP Server 2.4.x before 2.4.10 on Windows, when the     default AcceptFilter is enabled, allows remote     attackers to cause a denial of service (memory     consumption) via crafted requests.(CVE-2014-3523)

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp     may use uninitialized memory when proxying to a     malicious FTP server.(CVE-2020-1934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4751 advisory.

    - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of       uninitialized value
    - Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations       vulnerable to open redirect
    - Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential       open redirect
    - Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site       scripting in mod_proxy error page
    - Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference       in mod_remoteip
    - Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd:
      Push diary crash on specifically crafted HTTP/2 header
    - Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd:
      read-after-free in h2 connection shutdown
    - Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd:
      mod_http2: possible crash on late upgrade
    - Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
      mod_http2: read-after-free on a string compare
    - Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd:
      mod_http2: DoS via slow, unneeded request bodies

    mod_md

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of IBM HTTP Server running on the remote host is affected by multiple vulnerabilities as follows:

  - In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons     could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be     usable for denial-of-service attacks). (CVE-2018-20843)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point     to a page of their choice. This would only be exploitable where a server was set up with proxying enabled     but was misconfigured in such a way that the Proxy Error page was displayed. (CVE-2019-10092)

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the     request URL. (CVE-2019-10098)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4751 advisory.

  - In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain     resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming     data. This affects only HTTP/2 (mod_http2) connections. (CVE-2018-17189)

  - A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2     request handling could be made to access freed memory in string comparison when determining the method of     a request and thus process the request incorrectly. (CVE-2019-0196)

  - A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host     or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not     the first request on a connection could lead to a misconfiguration and crash. Server that never enabled     the h2 protocol or that only enabled it for https: and did not set H2Upgrade on are unaffected by this     issue. (CVE-2019-0197)

  - HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with H2PushResource, could lead     to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of     the configured push link header values, not data supplied by the client. (CVE-2019-10081)

  - In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made     to read memory after being freed, during connection shutdown. (CVE-2019-10082)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point     to a page of their choice. This would only be exploitable where a server was set up with proxying enabled     but was misconfigured in such a way that the Proxy Error page was displayed. (CVE-2019-10092)

  - In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy     server using the PROXY protocol, a specially crafted PROXY header could trigger a stack buffer overflow     or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by     untrusted HTTP clients. (CVE-2019-10097)

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the     request URL. (CVE-2019-10098)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within     the request URL. (CVE-2020-1927)

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a     malicious FTP server. (CVE-2020-1934)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10586:06 advisory.

    * CVE-2014-8109: mod_lua: fix LuaAuthzProvider argument handling issue
    * CVE-2019-10092: mod_proxy: fix limited cross-site scripting in mod_proxy error     page     CVE(s):
    CVE-2019-10092     In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point     to a page of their choice. This would only be exploitable where a server was set up with proxying enabled     but was misconfigured in such a way that the Proxy Error page was displayed.
    CVE-2014-8109     mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support     an httpd configuration in which the same Lua authorization provider is used with different arguments     within different contexts, which allows remote attackers to bypass intended access restrictions in     opportunistic circumstances by leveraging multiple Require directives, as demonstrated by a configuration     that specifies authorization for one group to access a certain directory, and authorization for a second     group to access a second directory.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4423:01 advisory.

    * httpd: mod_session_cookie does not respect expiry time (CVE-2018-17199)
      * httpd: mod_auth_digest: access control bypass due to race condition (CVE-2019-0217)
      * httpd: null-pointer dereference in mod_remoteip (CVE-2019-10097)
      * httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189)
      * httpd: URL normalization inconsistency (CVE-2019-0220)
      * httpd: limited cross-site scripting in mod_proxy error page (CVE-2019-10092)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A vulnerability was found in Apache HTTP Server 2.4.0     to 2.4.38. When the path component of a request URL     contains multiple consecutive slashes ('/'), directives     such as LocationMatch and RewriteRule must account for     duplicates in regular expressions while other aspects     of the servers processing will implicitly collapse     them.(CVE-2019-0220)

  - In Apache HTTP Server 2.4.0-2.4.39, a limited     cross-site scripting issue was reported affecting the     mod_proxy error page. An attacker could cause the link     on the error page to be malformed and instead point to     a page of their choice. This would only be exploitable     where a server was set up with proxying enabled but was     misconfigured in such a way that the Proxy Error page     was displayed.(CVE-2019-10092)

  - In Apache HTTP server 2.4.0 to 2.4.39, Redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an unexpected URL within the     request URL.(CVE-2019-10098)

  - In Apache HTTP Server 2.4.0 to 2.4.41, redirects     configured with mod_rewrite that were intended to be     self-referential might be fooled by encoded newlines     and redirect instead to an an unexpected URL within the     request URL.(CVE-2020-1927)

  - In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp     may use uninitialized memory when proxying to a     malicious FTP server.(CVE-2020-1934)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

SO-AND-SO reports : SECURITY: CVE-2019-10081 mod_http2: HTTP/2 very early pushes, for example configured with 'H2PushResource', could lead to an overwrite of memory in the pushing request's pool, leading to crashes. The memory copied is that of the configured push link header values, not data supplied by the client. SECURITY: CVE-2019-9517 mod_http2: a malicious client could perform a DoS attack by flooding a connection with requests and basically never reading responses on the TCP connection. Depending on h2 worker dimensioning, it was possible to block those with relatively few connections. SECURITY:
CVE-2019-10098 rewrite, core: Set PCRE_DOTALL flag by default to avoid unpredictable matches and substitutions with encoded line break characters. SECURITY: CVE-2019-10092 Remove HTML-escaped URLs from canned error responses to prevent misleading text/links being displayed via crafted links. SECURITY: CVE-2019-10097 mod_remoteip:
Fix stack-based buffer overflow and NULL pointer deference when reading the PROXY protocol header. CVE-2019-10082 mod_http2: Using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.

Several vulnerabilities have been found in the Apache HTTPD server.

  - CVE-2019-9517     Jonathan Looney reported that a malicious client could     perform a denial of service attack (exhausting h2     workers) by flooding a connection with requests and     basically never reading responses on the TCP connection.

  - CVE-2019-10081     Craig Young reported that HTTP/2 PUSHes could lead to an     overwrite of memory in the pushing request's pool,     leading to crashes.

  - CVE-2019-10082     Craig Young reported that the HTTP/2 session handling     could be made to read memory after being freed, during     connection shutdown.

  - CVE-2019-10092     Matei 'Mal' Badanoiu reported a limited cross-site     scripting vulnerability in the mod_proxy error page.

  - CVE-2019-10097     Daniel McCarney reported that when mod_remoteip was     configured to use a trusted intermediary proxy server     using the 'PROXY' protocol, a specially crafted PROXY     header could trigger a stack buffer overflow or NULL     pointer deference. This vulnerability could only be     triggered by a trusted proxy and not by untrusted HTTP     clients. The issue does not affect the stretch release.

  - CVE-2019-10098     Yukitsugu Sasaki reported a potential open redirect     vulnerability in the mod_rewrite module.

This update for apache2 fixes the following issues :

Security issues fixed :

  - CVE-2019-9517: Fixed HTTP/2 implementations that are     vulnerable to unconstrained interal data buffering     (bsc#1145575).

  - CVE-2019-10081: Fixed mod_http2 that is vulnerable to     memory corruption on early pushes (bsc#1145742).

  - CVE-2019-10082: Fixed mod_http2 that is vulnerable to     read-after-free in h2 connection shutdown (bsc#1145741).

  - CVE-2019-10092: Fixed limited cross-site scripting in     mod_proxy (bsc#1145740).

  - CVE-2019-10097: Fixed mod_remoteip stack-based buffer     overflow and NULL pointer dereference (bsc#1145739).

  - CVE-2019-10098: Fixed mod_rewrite configuration     vulnerablility to open redirect (bsc#1145738).

This update was imported from the SUSE:SLE-15:Update update project.

This update for apache2 fixes the following issues :

Security issues fixed :

CVE-2019-9517: Fixed HTTP/2 implementations that are vulnerable to unconstrained interal data buffering (bsc#1145575).

CVE-2019-10081: Fixed mod_http2 that is vulnerable to memory corruption on early pushes (bsc#1145742).

CVE-2019-10082: Fixed mod_http2 that is vulnerable to read-after-free in h2 connection shutdown (bsc#1145741).

CVE-2019-10092: Fixed limited cross-site scripting in mod_proxy (bsc#1145740).

CVE-2019-10098: Fixed mod_rewrite configuration vulnerablility to open redirect (bsc#1145738).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294511	MiracleLinux 8 : httpd:2.4 (AXSA:2021-1401:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/21	critical
194160	RHEL 6 / 7 : httpd24-httpd (RHSA-2019:4126)	Nessus	Red Hat Local Security Checks	2024/4/28	2024/11/7	high
130400	Amazon Linux 2 : httpd (ALAS-2019-1341)	Nessus	Amazon Linux Local Security Checks	2019/10/31	2024/4/16	high
135235	RHEL 6 / 7 : Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP2 (RHSA-2020:1337)	Nessus	Red Hat Local Security Checks	2020/4/6	2024/11/7	critical
140870	EulerOS 2.0 SP3 : httpd (EulerOS-SA-2020-2103)	Nessus	Huawei Local Security Checks	2020/9/28	2024/2/19	medium
142762	Oracle Linux 8 : httpd:2.4 (ELSA-2020-4751)	Nessus	Oracle Linux Local Security Checks	2020/11/12	2024/11/1	critical
144775	IBM HTTP Server 7.0.0.0 <= 7.0.0.45 / 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 < 8.5.5.17 / 9.0.0.0 < 9.0.5.1 Multiple Vulnerabilities (964768)	Nessus	Web Servers	2021/1/6	2022/12/7	medium
184538	Rocky Linux 8 : httpd:2.4 (RLSA-2020:4751)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/7	critical
283205	MiracleLinux 7 : httpd-2.4.6-99.1.0.9.el7.AXS7 (AXSA:2025-10586:06)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	medium
288903	MiracleLinux 4 : httpd24-1.1-19.AXS4, httpd24-httpd-2.4.25-9.AXS4.1, httpd24-nghttp2-1.7.1-8.AXS4 (AXSA:2019-4423:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/17	high
137492	EulerOS 2.0 SP2 : httpd (EulerOS-SA-2020-1650)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	medium
127951	FreeBSD : Apache -- Multiple vulnerabilities (caf545f2-c0d9-11e9-9051-4c72b94353b5) (Internal Data Buffering)	Nessus	FreeBSD Local Security Checks	2019/8/20	2022/12/6	critical
128182	Debian DSA-4509-1 : apache2 - security update (Internal Data Buffering)	Nessus	Debian Local Security Checks	2019/8/27	2022/12/6	critical
128460	openSUSE Security Update : apache2 (openSUSE-2019-2051) (Internal Data Buffering)	Nessus	SuSE Local Security Checks	2019/9/3	2022/12/5	critical
128612	SUSE SLES12 Security Update : apache2 (SUSE-SU-2019:2329-1) (Internal Data Buffering)	Nessus	SuSE Local Security Checks	2019/9/9	2022/12/5	critical

检测

插件搜索

critical

high

high

critical

medium

critical

medium

critical

medium

high

medium

critical

critical

critical

critical