httpd24-httpd-devel vulnerabilities (Red Hat)
99 vulnerabilities.
httpd24-httpd-develRed HatThe FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a...9.8 Criticalhttpd24-httpd-develRed HatThe NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows...9.8 Criticalhttpd24-httpd-develRed HatAn IMAP FETCH response line indicates the size of the returned data, in number of bytes. When...9.1 Criticalhttpd24-httpd-develRed Hatlibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 Highhttpd24-httpd-develRed HatApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highhttpd24-httpd-develRed Hatcurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 Mediumhttpd24-httpd-develRed HatWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 Mediumhttpd24-httpd-develRed HatA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...7.5 Highhttpd24-httpd-develRed HatIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 Criticalhttpd24-httpd-develRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticalhttpd24-httpd-develRed HatThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 Highhttpd24-httpd-develRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticalhttpd24-httpd-develRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticalhttpd24-httpd-develRed HatThe ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate...2.4 Lowhttpd24-httpd-develRed HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 Highhttpd24-httpd-develRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 Highhttpd24-httpd-develRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 Highhttpd24-httpd-develRed Hatcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...5.9 Mediumhttpd24-httpd-develRed HatThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...7.5 Highhttpd24-httpd-develRed Hatcurl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names...5.3 Mediumhttpd24-httpd-develRed Hatcurl before version 7.51.0 doesn't parse the authority component of the URL correctly when the...5.3 Mediumhttpd24-httpd-develRed HatA flaw was found in curl before version 7.51.0. The way curl handles cookies permits other...3.3 Lowhttpd24-httpd-develRed HatThe URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`....3.7 Lowhttpd24-httpd-develRed HatThe `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read...5.3 Mediumhttpd24-httpd-develRed HatThe 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow...6.5 Mediumhttpd24-httpd-develRed HatThe function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory...5.3 Mediumhttpd24-httpd-develRed HatThe libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing...5.3 Mediumhttpd24-httpd-develRed HatThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 Lowhttpd24-httpd-develRed HatA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 Lowhttpd24-httpd-develRed HatA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 Mediumhttpd24-httpd-develRed HatMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 Criticalhttpd24-httpd-develRed Hatcurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 Highhttpd24-httpd-develRed HatUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 Highhttpd24-httpd-develRed Hatcurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 Highhttpd24-httpd-develRed Hatcurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 Highhttpd24-httpd-develRed HatThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 Highhttpd24-httpd-develRed HatThe Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not...7.5 Highhttpd24-httpd-develRed HatThe Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of...5.9 Mediumhttpd24-httpd-develRed HatThe read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not...5.0 Mediumhttpd24-httpd-develRed HatThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Mediumhttpd24-httpd-develRed HatThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediumhttpd24-httpd-develRed HatThe lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server...5.0 Mediumhttpd24-httpd-develRed HatThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Mediumhttpd24-httpd-develRed HatThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...4.3 Mediumhttpd24-httpd-develRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumhttpd24-httpd-develRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumhttpd24-httpd-develRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumhttpd24-httpd-develRed HatThe mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is...4.3 Mediumhttpd24-httpd-develRed HatThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...5.0 Medium