The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade apache+mod_ssl+ipv6Upgrade apache+mod_sslUpgrade ru-apache+mod_ssl | Dec 10, 2025 | Oct 17, 2004 |
| Suse | — | Upgrade mod_ssl | Dec 12, 2013 | Jul 27, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub