httpd-core-debuginfo vulnerabilities (Red Hat)
50 vulnerabilities.
-
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_html: crash in dump_content 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_xml2enc heap overflow 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` 7.3 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_html buffer overflow 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules 5.5 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash 6.5 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_dav_fs protected directory access 9.1 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp 7.3 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_ldap per-dir use-after-free 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_dav_lock indirect lock crash 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_auth_digest timing attack 4.8 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_authn_socache crash 5.3 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: Off-by-one OOB reads in AJP getter functions 5.3 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 5.3 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data() 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr 8.8 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 8.3 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 5.4 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: CGI environment variable override 6.5 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_ssl TLS upgrade attack 7.4 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_ssl access control bypass with session resumption 9.1 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_ssl error log variable escaping 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: HTTP response splitting 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_rewrite proxy handler substitution 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. 9.1 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server weakness with encoded question marks in backreferences 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server proxy encoding problem 8.1 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: HTTP Response Splitting in multiple modules 6.3 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: HTTP response splitting 7.3 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_macro buffer over-read 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting 7.5 High -
httpd-core-debuginfoRed Hat Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy 9.8 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting 5.3 Medium -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp Possible request smuggling 9.0 Critical -
httpd-core-debuginfoRed Hat Apache HTTP Server: mod_dav out of bounds read, or write of zero byte 7.5 High -
httpd-core-debuginfoRed Hat mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism 9.8 Critical -
httpd-core-debuginfoRed Hat Information Disclosure in mod_lua with websockets 7.5 High -
httpd-core-debuginfoRed Hat mod_sed denial of service 7.5 High -
httpd-core-debuginfoRed Hat Denial of service in mod_lua r:parsebody 7.5 High -
httpd-core-debuginfoRed Hat Read beyond bounds in ap_strcmp_match() 9.1 Critical -
httpd-core-debuginfoRed Hat read beyond bounds via ap_rwrite() 5.3 Medium -
httpd-core-debuginfoRed Hat mod_proxy_ajp: Possible request smuggling 7.5 High -
httpd-core-debuginfoRed Hat mod_sed: Read/write beyond bounds 9.8 Critical -
httpd-core-debuginfoRed Hat core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody 9.1 Critical -
httpd-core-debuginfoRed Hat mod_lua Use of uninitialized value of in r:parsebody 7.5 High