According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - It was discovered that the httpd's mod_auth_digest     module did not properly initialize memory before using     it when processing certain headers related to digest     authentication. A remote attacker could possibly use     this flaw to disclose potentially sensitive information     or cause httpd child process to crash by sending     specially crafted requests to a server. (CVE-2017-9788)

  - It was discovered that the use of httpd's     ap_get_basic_auth_pw() API function outside of the     authentication phase could lead to authentication     bypass. A remote attacker could possibly use this flaw     to bypass required authentication if the API was used     incorrectly by one of the modules used by httpd.
    (CVE-2017-3167)

  - A NULL pointer dereference flaw was found in the     httpd's mod_ssl module. A remote attacker could use     this flaw to cause an httpd child process to crash if     another module used by httpd called a certain API     function during the processing of an HTTPS request.
    (CVE-2017-3169)

  - A buffer over-read flaw was found in the httpd's     ap_find_token() function. A remote attacker could use     this flaw to cause httpd child process to crash via a     specially crafted HTTP request. (CVE-2017-7668)

  - A buffer over-read flaw was found in the httpd's     mod_mime module. A user permitted to modify httpd's     MIME configuration could use this flaw to cause httpd     child process to crash. (CVE-2017-7679)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2226:02 advisory.

    * It was discovered that the httpd's mod_auth_digest module did not properly     initialize memory before using it when processing certain headers related to     digest authentication. A remote attacker could possibly use this flaw to     disclose potentially sensitive information or cause httpd child process to crash     by sending specially crafted requests to a server. (CVE-2017-9788)
      * It was discovered that the use of httpd's ap_get_basic_auth_pw() API     function outside of the authentication phase could lead to authentication     bypass. A remote attacker could possibly use this flaw to bypass required     authentication if the API was used incorrectly by one of the modules used by     httpd. (CVE-2017-3167)
      * A NULL pointer dereference flaw was found in the httpd's mod_ssl module. A     remote attacker could use this flaw to cause an httpd child process to crash if     another module used by httpd called a certain API function during the processing     of an HTTPS request. (CVE-2017-3169)
      * A NULL pointer dereference flaw was found in the mod_http2 module of httpd.
    A remote attacker could use this flaw to cause httpd child process to crash via     a specially crafted HTTP/2 request. (CVE-2017-7659)
      * A buffer over-read flaw was found in the httpd's ap_find_token() function. A     remote attacker could use this flaw to cause httpd child process to crash via a     specially crafted HTTP request. (CVE-2017-7668)
      * A buffer over-read flaw was found in the httpd's mod_mime module. A user     permitted to modify httpd's MIME configuration could use this flaw to cause     httpd child process to crash. (CVE-2017-7679)     CVE-2017-3167     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of     the ap_get_basic_auth_pw() by third-party modules outside of the     authentication phase may lead to authentication requirements being     bypassed.
    CVE-2017-3169     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl     may dereference a NULL pointer when third-party modules call     ap_hook_process_connection() during an HTTP request to an HTTPS port.
    CVE-2017-7659     A maliciously constructed HTTP/2 request could cause mod_http2 2.4.24,     2.4.25 to dereference a NULL pointer and crash the server process.
    CVE-2017-7668     The HTTP strict parsing changes added in Apache httpd 2.2.32 and     2.4.24 introduced a bug in token list parsing, which allows     ap_find_token() to search past the end of its input string. By     maliciously crafting a sequence of request headers, an attacker may be     able to cause a segmentation fault, or to force ap_find_token() to     return an incorrect value.
    CVE-2017-7679     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime     can read one byte past the end of a buffer when sending a malicious     Content-Type response header.
    CVE-2017-9788     In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value     placeholder in [Proxy-]Authorization headers of type 'Digest' was not     initialized or reset before or between successive key=value     assignments by mod_auth_digest. Providing an initial key with no '='     assignment could reflect the stale value of uninitialized pool memory     used by the prior request, leading to leakage of potentially     confidential information, and a segfault in other cases resulting in     denial of service.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2175:02 advisory.

    * It was discovered that the httpd's mod_auth_digest module did not properly     initialize memory before using it when processing certain headers related to     digest authentication. A remote attacker could possibly use this flaw to     disclose potentially sensitive information or cause httpd child process to crash     by sending specially crafted requests to a server. (CVE-2017-9788)
      * It was discovered that the use of httpd's ap_get_basic_auth_pw() API     function outside of the authentication phase could lead to authentication     bypass. A remote attacker could possibly use this flaw to bypass required     authentication if the API was used incorrectly by one of the modules used by     httpd. (CVE-2017-3167)
      * A NULL pointer dereference flaw was found in the httpd's mod_ssl module. A     remote attacker could use this flaw to cause an httpd child process to crash if     another module used by httpd called a certain API function during the processing     of an HTTPS request. (CVE-2017-3169)
      * A NULL pointer dereference flaw was found in the mod_http2 module of httpd.
    A remote attacker could use this flaw to cause httpd child process to crash via     a specially crafted HTTP/2 request. (CVE-2017-7659)
      * A buffer over-read flaw was found in the httpd's ap_find_token() function. A     remote attacker could use this flaw to cause httpd child process to crash via a     specially crafted HTTP request. (CVE-2017-7668)
      * A buffer over-read flaw was found in the httpd's mod_mime module. A user     permitted to modify httpd's MIME configuration could use this flaw to cause     httpd child process to crash. (CVE-2017-7679)     CVE-2017-3167     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of     the ap_get_basic_auth_pw() by third-party modules outside of the     authentication phase may lead to authentication requirements being     bypassed.
    CVE-2017-3169     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl     may dereference a NULL pointer when third-party modules call     ap_hook_process_connection() during an HTTP request to an HTTPS port.
    CVE-2017-7659     A maliciously constructed HTTP/2 request could cause mod_http2 2.4.24,     2.4.25 to dereference a NULL pointer and crash the server process.
    CVE-2017-7668     The HTTP strict parsing changes added in Apache httpd 2.2.32 and     2.4.24 introduced a bug in token list parsing, which allows     ap_find_token() to search past the end of its input string. By     maliciously crafting a sequence of request headers, an attacker may be     able to cause a segmentation fault, or to force ap_find_token() to     return an incorrect value.
    CVE-2017-7679     In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime     can read one byte past the end of a buffer when sending a malicious     Content-Type response header.
    CVE-2017-9788     In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value     placeholder in [Proxy-]Authorization headers of type 'Digest' was not     initialized or reset before or between successive key=value     assignments by mod_auth_digest. Providing an initial key with no '='     assignment could reflect the stale value of uninitialized pool memory     used by the prior request, leading to leakage of potentially     confidential information, and a segfault in other cases resulting in     denial of service.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.05, has httpd packages installed that are affected by multiple vulnerabilities:

  - Off-by-one error in the mod_ssl Certificate Revocation     List (CRL) verification callback in Apache, when     configured to use a CRL, allows remote attackers to     cause a denial of service (child process crash) via a     CRL that causes a buffer overflow of one null byte.
    (CVE-2005-1268)

  - The Apache HTTP server before 1.3.34, and 2.0.x before     2.0.55, when acting as an HTTP proxy, allows remote     attackers to poison the web cache, bypass web     application firewall protection, and conduct XSS attacks     via an HTTP request with both a Transfer-Encoding:
    chunked header and a Content-Length header, which     causes Apache to incorrectly handle and forward the body     of the request in a way that causes the receiving server     to process it as a separate HTTP request, aka HTTP     Request Smuggling. (CVE-2005-2088)

  - ssl_engine_kernel.c in mod_ssl before 2.8.24, when using     SSLVerifyClient optional in the global virtual host     configuration, does not properly enforce     SSLVerifyClient require in a per-location context,     which allows remote attackers to bypass intended access     restrictions. (CVE-2005-2700)

  - The byte-range filter in Apache 2.0 before 2.0.54 allows     remote attackers to cause a denial of service (memory     consumption) via an HTTP header with a large Range     field. (CVE-2005-2728)

  - Cross-site scripting (XSS) vulnerability in the mod_imap     module of Apache httpd before 1.3.35-dev and Apache     httpd 2.0.x before 2.0.56-dev allows remote attackers to     inject arbitrary web script or HTML via the Referer when     using image maps. (CVE-2005-3352)

  - mod_ssl in Apache 2.0 up to 2.0.55, when configured with     an SSL vhost with access control and a custom error 400     error page, allows remote attackers to cause a denial of     service (application crash) via a non-SSL request to an     SSL port, which triggers a NULL pointer dereference.
    (CVE-2005-3357)

  - The TLS protocol, and the SSL protocol 3.0 and possibly     earlier, as used in Microsoft Internet Information     Services (IIS) 7.0, mod_ssl in the Apache HTTP Server     2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5     and earlier, Mozilla Network Security Services (NSS)     3.12.4 and earlier, multiple Cisco products, and other     products, does not properly associate renegotiation     handshakes with an existing connection, which allows     man-in-the-middle attackers to insert data into HTTPS     sessions, and possibly other types of sessions protected     by TLS or SSL, by sending an unauthenticated request     that is processed retroactively by a server in a post-     renegotiation context, related to a plaintext     injection attack, aka the Project Mogul issue.
    (CVE-2009-3555)

  - The (1) mod_cache and (2) mod_dav modules in the Apache     HTTP Server 2.2.x before 2.2.16 allow remote attackers     to cause a denial of service (process crash) via a     request that lacks a path. (CVE-2010-1452)

  - fs/ext4/extents.c in the Linux kernel before 3.0 does     not mark a modified extent as dirty in certain cases of     extent splitting, which allows local users to cause a     denial of service (system crash) via vectors involving     ext4 umount and mount operations. (CVE-2011-3638)

  - It was discovered that the HTTP parser in httpd     incorrectly allowed certain characters not permitted by     the HTTP protocol specification to appear unencoded in     HTTP request headers. If httpd was used in conjunction     with a proxy or backend server that interpreted those     characters differently, a remote attacker could possibly     use this flaw to inject data into HTTP responses,     resulting in proxy cache poisoning. (CVE-2016-8743)

  - It was discovered that the use of httpd's     ap_get_basic_auth_pw() API function outside of the     authentication phase could lead to authentication     bypass. A remote attacker could possibly use this flaw     to bypass required authentication if the API was used     incorrectly by one of the modules used by httpd.
    (CVE-2017-3167)

  - A NULL pointer dereference flaw was found in the httpd's     mod_ssl module. A remote attacker could use this flaw to     cause an httpd child process to crash if another module     used by httpd called a certain API function during the     processing of an HTTPS request. (CVE-2017-3169)

  - A buffer over-read flaw was found in the httpd's     ap_find_token() function. A remote attacker could use     this flaw to cause httpd child process to crash via a     specially crafted HTTP request. (CVE-2017-7668)

  - A buffer over-read flaw was found in the httpd's     mod_mime module. A user permitted to modify httpd's MIME     configuration could use this flaw to cause httpd child     process to crash. (CVE-2017-7679)

  - It was discovered that the httpd's mod_auth_digest     module did not properly initialize memory before using     it when processing certain headers related to digest     authentication. A remote attacker could possibly use     this flaw to disclose potentially sensitive information     or cause httpd child process to crash by sending     specially crafted requests to a server. (CVE-2017-9788)

  - A use-after-free flaw was found in the way httpd handled     invalid and previously unregistered HTTP methods     specified in the Limit directive used in an .htaccess     file. A remote attacker could possibly use this flaw to     disclose portions of the server memory, or cause httpd     child process to crash. (CVE-2017-9798)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
103015	EulerOS 2.0 SP1 : httpd (EulerOS-SA-2017-1177)	Nessus	Huawei Local Security Checks	9/8/2017	11/24/2025	critical
291590	MiracleLinux 7 : httpd24-httpd-2.4.25-9.el7.1 (AXSA:2017-2226:02)	Nessus	Miracle Linux Local Security Checks	1/19/2026	1/19/2026	critical
288939	MiracleLinux 4 : httpd24-httpd-2.4.25-9.AXS4.1 (AXSA:2017-2175:02)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
127360	NewStart CGSL MAIN 4.05 : httpd Multiple Vulnerabilities (NS-SA-2019-0118)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	5/19/2022	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical