CVE-2016-4459
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
7.5 High
CVE-2016-4459 is a high vulnerability (CVSS 7.5) in Redhat Enterprise Linux, published April 12, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.67%, the 85th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 3.0, NVD
- Exploit chance
- 2.67%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.67%Up 1.5 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
hornetq-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
httpd22Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-develRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-manualRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
httpd22-toolsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
jbcs-httpd24Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
Show 118 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el7 | 1:1.0.2h-4.jbcs.el7 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1-3.jbcs.el7 | 0:1-3.jbcs.el7 |
jbossas-hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el7 | 0:2.3.25-4.SP11_redhat_1.ep6.el7 |
jbossas-jbossweb-nativeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.2.13-3.Final_redhat_2.ep6.el7 | 0:1.2.13-3.Final_redhat_2.ep6.el7 |
mod_jkRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_jk-ap22Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_jk-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el7 | 0:1.2.41-2.redhat_4.ep6.el7 |
mod_ldap22Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:2.2.26-56.ep6.el7 | 0:2.2.26-56.ep6.el7 |
mod_ssl22Red Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 1:2.2.26-56.ep6.el7 | 1:2.2.26-56.ep6.el7 |
tomcat-nativeRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el7 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el7 | 0:1.1.34-5.redhat_1.ep6.el7 |
hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
hornetq-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
httpdRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-develRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-manualRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
httpd-toolsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
jbcs-httpd24Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
jbcs-httpd24-opensslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-develRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-libsRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-perlRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-openssl-staticRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:1.0.2h-4.jbcs.el6 | 1:1.0.2h-4.jbcs.el6 |
jbcs-httpd24-runtimeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1-3.jbcs.el6 | 0:1-3.jbcs.el6 |
jbossas-hornetq-nativeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.3.25-4.SP11_redhat_1.ep6.el6 | 0:2.3.25-4.SP11_redhat_1.ep6.el6 |
jbossas-jbossweb-nativeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
mod_cluster-nativeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_cluster-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.2.13-3.Final_redhat_2.ep6.el6 | 0:1.2.13-3.Final_redhat_2.ep6.el6 |
mod_jkRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_jk-ap22Red Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_jk-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.2.41-2.redhat_4.ep6.el6 | 0:1.2.41-2.redhat_4.ep6.el6 |
mod_ldapRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:2.2.26-54.ep6.el6 | 0:2.2.26-54.ep6.el6 |
mod_sslRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 1:2.2.26-54.ep6.el6 | 1:2.2.26-54.ep6.el6 |
tomcat-nativeRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
tomcat-native-debuginfoRed Hat:jboss_enterprise_application_platform:6::el6 From an advisory covering 3 CVEs | before 0:1.1.34-5.redhat_1.ep6.el6 | 0:1.1.34-5.redhat_1.ep6.el6 |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-httpd-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-mod_auth_kerbRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:5.4-35.jbcs.el6 | 0:5.4-35.jbcs.el6 |
jbcs-httpd24-mod_auth_kerb-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:5.4-35.jbcs.el6 | 0:5.4-35.jbcs.el6 |
jbcs-httpd24-mod_bmxRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el6 | 0:0.9.6-14.GA.jbcs.el6 |
jbcs-httpd24-mod_bmx-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el6 | 0:0.9.6-14.GA.jbcs.el6 |
jbcs-httpd24-mod_bmx-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el6 | 0:0.9.6-14.GA.jbcs.el6 |
jbcs-httpd24-mod_cluster-nativeRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.3.5-13.Final_redhat_1.jbcs.el6 | 0:1.3.5-13.Final_redhat_1.jbcs.el6 |
jbcs-httpd24-mod_cluster-native-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.3.5-13.Final_redhat_1.jbcs.el6 | 0:1.3.5-13.Final_redhat_1.jbcs.el6 |
jbcs-httpd24-mod_cluster-native-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.3.5-13.Final_redhat_1.jbcs.el6 | 0:1.3.5-13.Final_redhat_1.jbcs.el6 |
jbcs-httpd24-mod_jkRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el6 | 0:1.2.41-14.redhat_1.jbcs.el6 |
jbcs-httpd24-mod_jk-ap24Red Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el6 | 0:1.2.41-14.redhat_1.jbcs.el6 |
jbcs-httpd24-mod_jk-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el6 | 0:1.2.41-14.redhat_1.jbcs.el6 |
jbcs-httpd24-mod_jk-manualRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el6 | 0:1.2.41-14.redhat_1.jbcs.el6 |
jbcs-httpd24-mod_jk-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el6 | 0:1.2.41-14.redhat_1.jbcs.el6 |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:2.4.23-102.jbcs.el6 | 1:2.4.23-102.jbcs.el6 |
jbcs-httpd24-mod_rtRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el6 | 0:2.4.1-16.GA.jbcs.el6 |
jbcs-httpd24-mod_rt-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el6 | 0:2.4.1-16.GA.jbcs.el6 |
jbcs-httpd24-mod_rt-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el6 | 0:2.4.1-16.GA.jbcs.el6 |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el6 | 0:2.9.1-18.GA.jbcs.el6 |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el6 | 0:2.9.1-18.GA.jbcs.el6 |
jbcs-httpd24-mod_security-src-zipRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el6 | 0:2.9.1-18.GA.jbcs.el6 |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el6 | 0:2.4.23-102.jbcs.el6 |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:2.4.23-102.jbcs.el6 | 1:2.4.23-102.jbcs.el6 |
jbcs-httpd24-nghttp2Red Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.12.0-9.jbcs.el6 | 0:1.12.0-9.jbcs.el6 |
jbcs-httpd24-nghttp2-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 0:1.12.0-9.jbcs.el6 | 0:1.12.0-9.jbcs.el6 |
jbcs-httpd24-opensslRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-openssl-develRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-openssl-libsRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-openssl-perlRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-openssl-staticRed Hat:jboss_core_services:1::el6 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el6 | 1:1.0.2h-12.jbcs.el6 |
jbcs-httpd24-httpdRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-develRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-manualRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-selinuxRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-src-zipRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-toolsRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-httpd-zipRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-mod_auth_kerbRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:5.4-35.jbcs.el7 | 0:5.4-35.jbcs.el7 |
jbcs-httpd24-mod_auth_kerb-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:5.4-35.jbcs.el7 | 0:5.4-35.jbcs.el7 |
jbcs-httpd24-mod_bmxRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el7 | 0:0.9.6-14.GA.jbcs.el7 |
jbcs-httpd24-mod_bmx-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el7 | 0:0.9.6-14.GA.jbcs.el7 |
jbcs-httpd24-mod_bmx-src-zipRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:0.9.6-14.GA.jbcs.el7 | 0:0.9.6-14.GA.jbcs.el7 |
jbcs-httpd24-mod_cluster-nativeRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.3.5-13.Final_redhat_1.jbcs.el7 | 0:1.3.5-13.Final_redhat_1.jbcs.el7 |
jbcs-httpd24-mod_cluster-native-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.3.5-13.Final_redhat_1.jbcs.el7 | 0:1.3.5-13.Final_redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jkRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el7 | 0:1.2.41-14.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-ap24Red Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el7 | 0:1.2.41-14.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el7 | 0:1.2.41-14.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_jk-manualRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.2.41-14.redhat_1.jbcs.el7 | 0:1.2.41-14.redhat_1.jbcs.el7 |
jbcs-httpd24-mod_ldapRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-mod_proxy_htmlRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:2.4.23-102.jbcs.el7 | 1:2.4.23-102.jbcs.el7 |
jbcs-httpd24-mod_rtRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el7 | 0:2.4.1-16.GA.jbcs.el7 |
jbcs-httpd24-mod_rt-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el7 | 0:2.4.1-16.GA.jbcs.el7 |
jbcs-httpd24-mod_rt-src-zipRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.1-16.GA.jbcs.el7 | 0:2.4.1-16.GA.jbcs.el7 |
jbcs-httpd24-mod_securityRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el7 | 0:2.9.1-18.GA.jbcs.el7 |
jbcs-httpd24-mod_security-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el7 | 0:2.9.1-18.GA.jbcs.el7 |
jbcs-httpd24-mod_security-src-zipRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.9.1-18.GA.jbcs.el7 | 0:2.9.1-18.GA.jbcs.el7 |
jbcs-httpd24-mod_sessionRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:2.4.23-102.jbcs.el7 | 0:2.4.23-102.jbcs.el7 |
jbcs-httpd24-mod_sslRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:2.4.23-102.jbcs.el7 | 1:2.4.23-102.jbcs.el7 |
jbcs-httpd24-nghttp2Red Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.12.0-9.jbcs.el7 | 0:1.12.0-9.jbcs.el7 |
jbcs-httpd24-nghttp2-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 0:1.12.0-9.jbcs.el7 | 0:1.12.0-9.jbcs.el7 |
jbcs-httpd24-opensslRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
jbcs-httpd24-openssl-debuginfoRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
jbcs-httpd24-openssl-develRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
jbcs-httpd24-openssl-libsRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
jbcs-httpd24-openssl-perlRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
jbcs-httpd24-openssl-staticRed Hat:jboss_core_services:1::el7 From an advisory covering 6 CVEs | before 1:1.0.2h-12.jbcs.el7 | 1:1.0.2h-12.jbcs.el7 |
What each source reports
NVD Score used
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
- Record
CVE-2016-4459- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
- Record
CVE-2016-4459- Updated
- 2026-11-02
EUVDEUVD-2016-5448No score
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
- Record
EUVD-2016-5448- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wcxv-fwxr-qwf7
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
- Record
GHSA-wcxv-fwxr-qwf7- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVRHSA-2016:2054
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 7
- Record
RHSA-2016:2054- CVSS 3.0
- 5.1 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2016:2055
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 natives update on RHEL 6
- Record
RHSA-2016:2055- CVSS 3.0
- 5.1 Medium
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2017:0193
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6
- Record
RHSA-2017:0193- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRHSA-2017:0194
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 7
- Record
RHSA-2017:0194- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-13
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
rhn.redhat.com/errata/RHSA-2016-2056.html
access.redhat.com/errata/RHSA-2017:0194
Show 55 moreShow less
securityfocus.com/bid/93555
bugzilla.redhat.com/show_bug.cgi?id=1341583
nvd.nist.gov/vuln/detail/CVE-2016-4459
github.com/advisories/GHSA-wcxv-fwxr-qwf7
security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2054.json
cve.org/CVERecord?id=CVE-2015-3183
openssl.org/news/secadv/20160503.txt
openssl.org/news/secadv/20160922.txt
eprint.iacr.org/2016/594
tomcat.apache.org/security-jk.html