mod_session vulnerabilities (AlmaLinux)
78 vulnerabilities.
mod_sessionAlmaLinuxApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 Mediummod_sessionAlmaLinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highmod_sessionAlmaLinuxApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 Highmod_sessionAlmaLinuxApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Criticalmod_sessionAlmaLinuxApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 Mediummod_sessionAlmaLinuxApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Criticalmod_sessionAlmaLinuxApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 Highmod_sessionAlmaLinuxmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticalmod_sessionAlmaLinuxInformation Disclosure in mod_lua with websockets7.5 Highmod_sessionAlmaLinuxmod_sed denial of service7.5 Highmod_sessionAlmaLinuxDenial of service in mod_lua r:parsebody7.5 Highmod_sessionAlmaLinuxRead beyond bounds in ap_strcmp_match()9.1 Criticalmod_sessionAlmaLinuxread beyond bounds via ap_rwrite()5.3 Mediummod_sessionAlmaLinuxmod_proxy_ajp: Possible request smuggling7.5 Highmod_sessionAlmaLinuxmod_sed: Read/write beyond bounds9.8 Criticalmod_sessionAlmaLinuxcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticalmod_sessionAlmaLinuxHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticalmod_sessionAlmaLinuxmod_lua Use of uninitialized value of in r:parsebody7.5 Highmod_sessionAlmaLinuxPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 Highmod_sessionAlmaLinuxPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Criticalmod_sessionAlmaLinuxMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 Criticalmod_sessionAlmaLinuxmod_proxy SSRF9.0 Criticalmod_sessionAlmaLinuxap_escape_quotes buffer overflow9.8 Criticalmod_sessionAlmaLinuxmod_proxy_uwsgi out of bound read7.5 Highmod_sessionAlmaLinuxNULL pointer dereference in httpd core7.5 Highmod_sessionAlmaLinuxRequest splitting via HTTP/2 method injection and mod_proxy7.5 Highmod_sessionAlmaLinuxApache HTTP Server mod_session response handling heap overflow9.8 Criticalmod_sessionAlmaLinuxmod_auth_digest possible stack overflow by one nul byte7.3 High