CVE.RADIO
FREN

CVE-2010-0434

apache2VulnerabilityPatched

No public exploitation has been reported so far. A fixed version is available (see the table below).

Recommended action: Update to the fixed version listed for your distribution using the native package manager.

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

DistributionPackageAffectedFixed versionStatus
Debian:11apache2-2.2.15-1fixed
Debian:12apache2-2.2.15-1fixed
Debian:13apache2-2.2.15-1fixed
Debian:14apache2-2.2.15-1fixed
Debian:5.0apache2-2.2.9-10+lenny7fixed
openSUSE:Tumbleweedapache2-2.4.23-4.1fixed
Red Hat:enterprise_linux:5::client_workstationhttpd-0:2.2.3-31.el5_4.4fixed
Red Hat:enterprise_linux:5::clienthttpd-0:2.2.3-31.el5_4.4fixed
Red Hat:enterprise_linux:5::serverhttpd-0:2.2.3-31.el5_4.4fixed
Red Hat:enterprise_linux:4::ashttpd-0:2.0.52-41.ent.7fixed
Red Hat:enterprise_linux:4::desktophttpd-0:2.0.52-41.ent.7fixed
Red Hat:enterprise_linux:4::eshttpd-0:2.0.52-41.ent.7fixed
Red Hat:enterprise_linux:4::wshttpd-0:2.0.52-41.ent.7fixed
Red Hat:jboss_enterprise_web_server:1::el5httpd-0:2.2.14-1.2.6.jdk6.ep5.el5fixed

Sources