httpd-debuginfo vulnerabilities (Red Hat)
250 vulnerabilities.
httpd-debuginfoRed HatRead beyond bounds in ap_strcmp_match()9.1 Criticalhttpd-debuginfoRed Hatread beyond bounds via ap_rwrite()5.3 Mediumhttpd-debuginfoRed Hatmod_proxy_ajp: Possible request smuggling7.5 Highhttpd-debuginfoRed Hatmod_sed: Read/write beyond bounds9.8 Criticalhttpd-debuginfoRed Hatcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticalhttpd-debuginfoRed HatHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticalhttpd-debuginfoRed Hatmod_lua Use of uninitialized value of in r:parsebody7.5 Highhttpd-debuginfoRed HatPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 Highhttpd-debuginfoRed HatPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Criticalhttpd-debuginfoRed HatMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 Criticalhttpd-debuginfoRed Hatmod_proxy SSRF9.0 Criticalhttpd-debuginfoRed Hatap_escape_quotes buffer overflow9.8 Criticalhttpd-debuginfoRed Hatmod_proxy_uwsgi out of bound read7.5 Highhttpd-debuginfoRed HatNULL pointer dereference in httpd core7.5 Highhttpd-debuginfoRed HatRequest splitting via HTTP/2 method injection and mod_proxy7.5 Highhttpd-debuginfoRed HatUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumhttpd-debuginfoRed HatApache HTTP Server mod_session response handling heap overflow9.8 Criticalhttpd-debuginfoRed Hatmod_session NULL pointer dereference7.5 Highhttpd-debuginfoRed Hatmod_auth_digest possible stack overflow by one nul byte7.3 Highhttpd-debuginfoRed Hatmod_proxy_http NULL pointer dereference7.5 Highhttpd-debuginfoRed HatIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...5.3 Mediumhttpd-debuginfoRed HatApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highhttpd-debuginfoRed HatApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticalhttpd-debuginfoRed HatApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 Highhttpd-debuginfoRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumhttpd-debuginfoRed HatJBossWeb Bayeux has reflected XSS6.1 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 Highhttpd-debuginfoRed HatHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 Highhttpd-debuginfoRed HatIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticalhttpd-debuginfoRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highhttpd-debuginfoRed HatIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...7.5 Highhttpd-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediumhttpd-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highhttpd-debuginfoRed HatIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 Highhttpd-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediumhttpd-debuginfoRed HatIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediumhttpd-debuginfoRed HatIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highhttpd-debuginfoRed Hatmod_userdir CRLF injection6.1 Mediumhttpd-debuginfoRed HatA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...6.5 Mediumhttpd-debuginfoRed HatIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Criticalhttpd-debuginfoRed HatA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 Highhttpd-debuginfoRed HatA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Mediumhttpd-debuginfoRed HatIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Mediumhttpd-debuginfoRed HatIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 Highhttpd-debuginfoRed HatIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 Highhttpd-debuginfoRed HatUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J7.5 High- Show moreLoading…