CVE-2020-13938

概要

参考情報

• httpd.apache.org/security/vulnerabilities_24.html · Release Notes
• openwall.com/lists/oss-security/2021/06/10/3 · Mailing List
• kc.mcafee.com/corporate/index · Third Party Advisory
• lists.apache.org/thread.html/r5fdc4fbbc7ddb816c843329a9accdcf284ade86e8d77b8c2a6d9bc30%40%3Cannounce.httpd.apache.org%3E
• lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd%40%3Cdev.httpd.apache.org%3E
• lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E · Mailing List
• security.netapp.com/advisory/ntap-20210702-0001 · Third Party Advisory

http server のその他の脆弱性

• CVE-2026-93546高 8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker …
• CVE-2026-79768中 5.3Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wi…
• CVE-2026-73637高 7.3Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated …
• CVE-2026-73636高 8.1Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a …
• CVE-2026-63718高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via …