CyberSecBulletin

Apachefriends vulnerabilities

We track 3 vulnerabilities in Apachefriends products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 17, 2024.

3vulnerabilities
1critical
2high
0exploited
8.7average CVSS score

Latest Apachefriends vulnerabilities

  • 7.5 High severity

    XAMPP: Uncontrolled Resource Consumption

    CVE-2024-5055Apache Friends

    Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.

  • 9.8 Critical severity

    XAMPP: Buffer Copy without Checking Size of Input

    CVE-2024-0338Apachefriends

    A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug argument that controls the Structured Exception Handler (SEH).

  • 8.8 High severity

    Xampp: Incorrect Default Permissions

    CVE-2022-29376ApachefriendsEPSS 1.46%

    Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.