https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T07:46:50.200463+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-9788 CVE-2017-9788 2026-10-05T07:46:50.222953+00:00

Affected: Apache Software Foundation Apache HTTP Server

In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.

 https://vulnerability.circl.lu/vuln/usn-3370-1 USN-3370-1 — apache2 vulnerability 2026-10-05T07:46:50.223065+00:00

Affected: Ubuntu:14.04:LTS: apache2, Ubuntu:16.04:LTS: apache2

Robert Święcki discovered that the Apache HTTP Server mod_auth_digest module incorrectly cleared values when processing certain requests. A remote attacker could use this issue to cause the server to crash, resulting in a denial or service, or possibly obtain sensitive information.