httpd24-httpd-devel vulnerabilities (Red Hat)
99 vulnerabilities.
-
httpd24-httpd-develRed Hat Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy 9.8 Critical -
httpd24-httpd-develRed Hat mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism 9.8 Critical -
httpd24-httpd-develRed Hat Information Disclosure in mod_lua with websockets 7.5 High -
httpd24-httpd-develRed Hat mod_sed denial of service 7.5 High -
httpd24-httpd-develRed Hat Denial of service in mod_lua r:parsebody 7.5 High -
httpd24-httpd-develRed Hat Read beyond bounds in ap_strcmp_match() 9.1 Critical -
httpd24-httpd-develRed Hat read beyond bounds via ap_rwrite() 5.3 Medium -
httpd24-httpd-develRed Hat mod_proxy_ajp: Possible request smuggling 7.5 High -
httpd24-httpd-develRed Hat mod_sed: Read/write beyond bounds 9.8 Critical -
httpd24-httpd-develRed Hat core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody 9.1 Critical -
httpd24-httpd-develRed Hat HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier 9.8 Critical -
httpd24-httpd-develRed Hat mod_lua Use of uninitialized value of in r:parsebody 7.5 High -
httpd24-httpd-develRed Hat Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier 8.2 High -
httpd24-httpd-develRed Hat Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier 9.8 Critical -
httpd24-httpd-develRed Hat mod_proxy SSRF 9.0 Critical -
httpd24-httpd-develRed Hat ap_escape_quotes buffer overflow 9.8 Critical -
httpd24-httpd-develRed Hat mod_proxy_uwsgi out of bound read 7.5 High -
httpd24-httpd-develRed Hat NULL pointer dereference in httpd core 7.5 High -
httpd24-httpd-develRed Hat Request splitting via HTTP/2 method injection and mod_proxy 7.5 High -
httpd24-httpd-develRed Hat IP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using... 5.3 Medium -
httpd24-httpd-develRed Hat Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module... 7.5 High -
httpd24-httpd-develRed Hat Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE 9.8 Critical -
httpd24-httpd-develRed Hat Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'... 7.5 High -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended... 6.1 Medium -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted... 7.2 High -
httpd24-httpd-develRed Hat In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended... 6.1 Medium -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting... 6.1 Medium -
httpd24-httpd-develRed Hat Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
httpd24-httpd-develRed Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
httpd24-httpd-develRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
httpd24-httpd-develRed Hat A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a... 5.3 Medium -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when... 7.5 High -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code... 7.8 High -
httpd24-httpd-develRed Hat A vulnerability was found in mod_auth_mellon before v0.14.2. If Apache is configured as a reverse... 8.1 High -
httpd24-httpd-develRed Hat In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to... 5.3 Medium -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time... 7.5 High -
httpd24-httpd-develRed Hat In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can... 5.9 Medium -
httpd24-httpd-develRed Hat curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The... 7.5 High -
httpd24-httpd-develRed Hat DoS for HTTP/2 connections by crafted requests 7.5 High -
httpd24-httpd-develRed Hat curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... 9.1 Critical -
httpd24-httpd-develRed Hat In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the... 9.8 Critical -
httpd24-httpd-develRed Hat A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to... 7.5 High -
httpd24-httpd-develRed Hat A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,... 5.9 Medium -
httpd24-httpd-develRed Hat In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to... 5.3 Medium -
httpd24-httpd-develRed Hat In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a... 8.1 High -
httpd24-httpd-develRed Hat In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if... 7.5 High -
httpd24-httpd-develRed Hat A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... 9.1 Critical -
httpd24-httpd-develRed Hat A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... 7.5 High -
httpd24-httpd-develRed Hat curl FTP path confusion leads to NIL byte out of bounds write 9.8 Critical -
httpd24-httpd-develRed Hat libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When... 9.8 Critical - Show olderLoading…