httpd-filesystem vulnerabilities (Red Hat)
113 vulnerabilities.
httpd-filesystemRed HatApache HTTP Server: mod_proxy_http2 denial of service7.5 Highhttpd-filesystemRed HatApache HTTP Server: mod_ssl access control bypass with session resumption9.1 Criticalhttpd-filesystemRed HatApache HTTP Server: mod_ssl error log variable escaping7.5 Highhttpd-filesystemRed HatApache HTTP Server: HTTP response splitting7.5 Highhttpd-filesystemRed HatApache HTTP Server: mod_rewrite proxy handler substitution7.5 Highhttpd-filesystemRed HatApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request7.5 Highhttpd-filesystemRed HatApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect9.8 Criticalhttpd-filesystemRed HatApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.9.1 Criticalhttpd-filesystemRed HatApache HTTP Server weakness with encoded question marks in backreferences9.8 Criticalhttpd-filesystemRed HatApache HTTP Server proxy encoding problem8.1 Highhttpd-filesystemRed HatApache HTTP Server: HTTP Response Splitting in multiple modules6.3 Mediumhttpd-filesystemRed HatApache HTTP Server: HTTP response splitting7.3 Highhttpd-filesystemRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Highhttpd-filesystemRed HatApache HTTP Server: mod_macro buffer over-read7.5 Highhttpd-filesystemRed HatApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 Mediumhttpd-filesystemRed HatApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 Highhttpd-filesystemRed HatApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Criticalhttpd-filesystemRed HatApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 Mediumhttpd-filesystemRed HatApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Criticalhttpd-filesystemRed HatApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 Highhttpd-filesystemRed Hatmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticalhttpd-filesystemRed HatInformation Disclosure in mod_lua with websockets7.5 Highhttpd-filesystemRed Hatmod_sed denial of service7.5 Highhttpd-filesystemRed HatDenial of service in mod_lua r:parsebody7.5 Highhttpd-filesystemRed HatRead beyond bounds in ap_strcmp_match()9.1 Criticalhttpd-filesystemRed Hatread beyond bounds via ap_rwrite()5.3 Mediumhttpd-filesystemRed Hatmod_proxy_ajp: Possible request smuggling7.5 Highhttpd-filesystemRed Hatmod_sed: Read/write beyond bounds9.8 Criticalhttpd-filesystemRed Hatcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticalhttpd-filesystemRed HatHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticalhttpd-filesystemRed Hatmod_lua Use of uninitialized value of in r:parsebody7.5 Highhttpd-filesystemRed HatPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 Highhttpd-filesystemRed HatPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Criticalhttpd-filesystemRed HatMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 Criticalhttpd-filesystemRed Hatmod_proxy SSRF9.0 Criticalhttpd-filesystemRed Hatap_escape_quotes buffer overflow9.8 Criticalhttpd-filesystemRed Hatmod_proxy_uwsgi out of bound read7.5 Highhttpd-filesystemRed HatNULL pointer dereference in httpd core7.5 Highhttpd-filesystemRed HatRequest splitting via HTTP/2 method injection and mod_proxy7.5 Highhttpd-filesystemRed HatUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumhttpd-filesystemRed HatApache HTTP Server mod_session response handling heap overflow9.8 Criticalhttpd-filesystemRed Hatmod_session NULL pointer dereference7.5 Highhttpd-filesystemRed Hatmod_auth_digest possible stack overflow by one nul byte7.3 Highhttpd-filesystemRed Hatmod_proxy_http NULL pointer dereference7.5 Highhttpd-filesystemRed HatApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highhttpd-filesystemRed HatApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticalhttpd-filesystemRed HatApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 Highhttpd-filesystemRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumhttpd-filesystemRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumhttpd-filesystemRed HatIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 High- Show moreLoading…