VulertSecurity VulertSecurity

Vulnerability Database · Alpine · apache2 · Version

apache2 2.4.33-r1

2.4.33-r1 is affected by 62 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 6 High 34 Medium 22 Low 0 Unrated 0

All apache2 versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

apache2 2.4.33-r1 vulnerabilities

62 vulnerabilities cover apache2 2.4.33-r1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Heap Overflow Vulnerability in Apache2 Package - CVE-2021-26691 9.8 critical 2.4.48-r0 10 Jun 2021
Heap Overflow Vulnerability in Apache HTTP Server 9.8 critical 2.4.48-r0 10 Jun 2021
Apache HTTP Server mod_proxy_uwsgi Information Disclosure and Possible RCE (CVE-2020-11984) 9.8 critical 2.4.46-r0 07 Aug 2020
Critical Vulnerability in Apache2: Potential RCE and Information Disclosure 9.8 critical 2.4.46-r0 07 Aug 2020
Memory Read After Free Vulnerability in Apache HTTP Server 9.1 critical 2.4.41-r0 26 Sep 2019
Critical Memory Management Vulnerability in Apache2: CVE-2019-10082 9.1 critical 2.4.41-r0 26 Sep 2019
Critical Vulnerability in Apache2: Arbitrary Code Execution Risk 7.8 high 2.4.39-r0 08 Apr 2019
Apache HTTP Server 2.4 Privilege Escalation (CVE-2019-0211) 7.8 high 2.4.39-r0 08 Apr 2019
Apache HTTP Server 2.4.47 Vulnerability: NULL Pointer Dereference in HTTP/2 Protocol Handler 7.5 high 2.4.48-r0 15 Jun 2021
Apache HTTP Server - HTTP/2 Protocol Handler Request Header Size Limitation Vulnerability (CVE-2021-31618) 7.5 high 2.4.48-r0 15 Jun 2021
Denial of Service Vulnerability in Apache2 Package (CVE-2020-13950) 7.5 high 2.4.48-r0 10 Jun 2021
Apache HTTP Server mod_session Cookie Header NULL Pointer Dereference Vulnerability (CVE-2021-26690) 7.5 high 2.4.48-r0 10 Jun 2021
Denial of Service Vulnerability in Apache2: CVE-2021-26690 7.5 high 2.4.48-r0 10 Jun 2021
Apache HTTP Server mod_proxy_http NULL Pointer Dereference Denial of Service (CVE-2020-13950) 7.5 high 2.4.48-r0 10 Jun 2021
Critical Vulnerability in Apache2: Cache-Digest Header Exploit 7.5 high 2.4.46-r0 07 Aug 2020
Apache HTTP Server CVE-2020-9490: HTTP/2 Request Crash Vulnerability 7.5 high 2.4.46-r0 07 Aug 2020
Memory Pool Mismanagement in Apache HTTP Server 2.4.20 to 2.4.43 7.5 high 2.4.46-r0 07 Aug 2020
Apache HTTP Server Vulnerability (CVE-2020-11993) 7.5 high 2.4.46-r0 07 Aug 2020
Denial of Service Vulnerability in Apache2 Package - CVE-2019-17657 7.5 high 2.4.48-r0 07 Apr 2020
Uncontrolled Resource Consumption in Fortinet FortiSwitch, FortiAnalyzer, FortiManager, and FortiAP-S/W2 7.5 high 2.4.48-r0 07 Apr 2020
Memory Overwrite Vulnerability in Apache2 7.5 high 2.4.41-r0 15 Aug 2019
Memory Overwrite Vulnerability in Apache2 Package: CVE-2019-10081 7.5 high 2.4.41-r0 15 Aug 2019
Unconstrained Internal Data Buffering Vulnerability in Apache2 and Node.js 7.5 high 2.4.41-r0 13 Aug 2019
Denial of Service Vulnerability in Apache2 and Node.js on Alpine Linux 7.5 high 2.4.41-r0 13 Aug 2019
Race Condition Vulnerability in Apache HTTP Server 2.4 - CVE-2019-0217 7.5 high 2.4.39-r0 08 Apr 2019
Race Condition Vulnerability in Apache HTTP Server 7.5 high 2.4.39-r0 08 Apr 2019
Apache HTTP Server 2.4 mod_ssl Client Certificate Verification Bypass (CVE-2019-0215) 7.5 high 2.4.39-r0 08 Apr 2019
Apache HTTP Server 2.4 Client Certificate Verification Bypass Vulnerability 7.5 high 2.4.39-r0 08 Apr 2019
Denial of Service Vulnerability in Apache HTTP Server (CVE-2019-0190) 7.5 high 2.4.38-r0 30 Jan 2019
Apache HTTP Server 2.4 - Session Expiry Time Bypass 7.5 high 2.4.38-r0 30 Jan 2019
Denial of Service Vulnerability in Apache2: CVE-2019-0190 7.5 high 2.4.38-r0 30 Jan 2019
Critical Session Expiry Vulnerability in Apache2 Package 7.5 high 2.4.38-r0 30 Jan 2019
Apache HTTP Server mod_md Challenge Handler NULL Pointer Dereference 7.5 high 2.4.34-r0 18 Jul 2018
Apache2 Denial of Service Vulnerability - CVE-2018-8011 7.5 high 2.4.34-r0 18 Jul 2018
Denial of Service Vulnerability in Apache HTTP Server 7.5 high 2.4.34-r0 18 Jun 2018
Denial of Service Vulnerability in Apache2: CVE-2018-1333 7.5 high 2.4.34-r0 18 Jun 2018
Critical Stack Overflow Vulnerability in Apache2 - CVE-2020-35452 7.3 high 2.4.48-r0 10 Jun 2021
Stack Overflow in mod_auth_digest in Apache HTTP Server 7.3 high 2.4.48-r0 10 Jun 2021
Stack Buffer Overflow in Apache HTTP Server 7.2 high 2.4.41-r0 26 Sep 2019
Critical Buffer Overflow Vulnerability in Apache2 Package - CVE-2019-10097 7.2 high 2.4.41-r0 26 Sep 2019
Apache HTTP Server 2.4 Vulnerability: Redirects Misconfiguration Leading to Unexpected URL Redirection 6.1 medium 2.4.43-r0 02 Apr 2020
Apache HTTP Server mod_rewrite Redirect Vulnerability (CVE-2020-1927) 6.1 medium 2.4.43-r0 02 Apr 2020
Apache HTTP Server mod_proxy Error Page Cross-Site Scripting (CVE-2019-10092) 6.1 medium 2.4.41-r0 26 Sep 2019
Cross-Site Scripting Vulnerability in Apache2: CVE-2019-10092 6.1 medium 2.4.41-r0 26 Sep 2019
Apache HTTP Server mod_rewrite Redirect Vulnerability (CVE-2019-10098) 6.1 medium 2.4.41-r0 25 Sep 2019
Apache HTTP Server Vulnerability: Redirects Misconfiguration Due to Encoded Newlines 6.1 medium 2.4.41-r0 25 Sep 2019
Apache HTTP Server HTTP/2 SETTINGS Frames DoS Vulnerability (CVE-2018-11763) 5.9 medium 2.4.35-r0 25 Sep 2018
Apache HTTP Server 2.4.17 to 2.4.34 Denial of Service Vulnerability in apache2 Package 5.9 medium 2.4.35-r0 25 Sep 2018
Apache HTTP Server Unprivileged Local Users Stop httpd on Windows (CVE-2020-13938) 5.5 medium 2.4.48-r0 10 Jun 2021
Local User Privilege Escalation in Apache HTTP Server - CVE-2020-13938 5.5 medium 2.4.48-r0 10 Jun 2021
Apache HTTP Server Vulnerability (CVE-2021-30641) 5.3 medium 2.4.48-r0 10 Jun 2021
Apache HTTP Server Vulnerability: Unexpected Matching Behavior in apache2 5.3 medium 2.4.48-r0 10 Jun 2021
Uninitialized Memory Use in Apache HTTP Server mod_proxy_ftp 5.3 medium 2.4.43-r0 01 Apr 2020
Apache HTTP Server Vulnerability: Uninitialized Memory Exposure in mod_proxy_ftp 5.3 medium 2.4.43-r0 01 Apr 2020
Memory Access Vulnerability in Apache2 Package: CVE-2019-0196 5.3 medium 2.4.39-r0 11 Jun 2019
Apache HTTP Server 2.4.17 to 2.4.38 - Memory Access Vulnerability (CVE-2019-0196) 5.3 medium 2.4.39-r0 11 Jun 2019
5.3 medium 2.4.39-r0 11 Jun 2019
Apache HTTP Server Multiple Consecutive Slashes Path Component Handling Vulnerability (CVE-2019-0220) 5.3 medium 2.4.39-r0 11 Jun 2019
Apache HTTP Server Vulnerability (CVE-2018-17189) 5.3 medium 2.4.38-r0 30 Jan 2019
Apache HTTP Server Vulnerability: Slow Loris Attack on HTTP/2 Connections 5.3 medium 2.4.38-r0 30 Jan 2019
Apache HTTP Server Vulnerability: Denial of Service Risk in Versions 2.4.34 to 2.4.38 4.2 medium 2.4.39-r0 11 Jun 2019
Apache HTTP Server 2.4.34 to 2.4.38 HTTP/2 Upgrade Request Misconfiguration Vulnerability (CVE-2019-0197) 4.2 medium 2.4.39-r0 11 Jun 2019

Looking for another version, or everything Vulert holds for apache2?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About apache2 2.4.33-r1

Is apache2 2.4.33-r1 vulnerable?

Yes. 62 vulnerabilities in the Vulert database cover apache2 2.4.33-r1: 6 critical, 34 high, 22 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor apache2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the apache2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.