httpd24-nghttp2 vulnerabilities (Red Hat)
50 vulnerabilities.
-
httpd24-nghttp2Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
httpd24-nghttp2Red Hat Denial of service in nghttp2 3.7 Low -
httpd24-nghttp2Red Hat In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted... 7.2 High -
httpd24-nghttp2Red Hat In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting... 6.1 Medium -
httpd24-nghttp2Red Hat Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
httpd24-nghttp2Red Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
httpd24-nghttp2Red Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
httpd24-nghttp2Red Hat A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a... 5.3 Medium -
httpd24-nghttp2Red Hat In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when... 7.5 High -
httpd24-nghttp2Red Hat In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to... 5.3 Medium -
httpd24-nghttp2Red Hat In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time... 7.5 High -
httpd24-nghttp2Red Hat In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can... 5.9 Medium -
httpd24-nghttp2Red Hat curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The... 7.5 High -
httpd24-nghttp2Red Hat DoS for HTTP/2 connections by crafted requests 7.5 High -
httpd24-nghttp2Red Hat curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read... 9.1 Critical -
httpd24-nghttp2Red Hat In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the... 9.8 Critical -
httpd24-nghttp2Red Hat A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to... 7.5 High -
httpd24-nghttp2Red Hat A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,... 5.9 Medium -
httpd24-nghttp2Red Hat In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to... 5.3 Medium -
httpd24-nghttp2Red Hat In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a... 8.1 High -
httpd24-nghttp2Red Hat In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if... 7.5 High -
httpd24-nghttp2Red Hat A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling... 9.1 Critical -
httpd24-nghttp2Red Hat A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code... 7.5 High -
httpd24-nghttp2Red Hat curl FTP path confusion leads to NIL byte out of bounds write 9.8 Critical -
httpd24-nghttp2Red Hat libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When... 9.8 Critical -
httpd24-nghttp2Red Hat The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a... 9.8 Critical -
httpd24-nghttp2Red Hat The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows... 9.8 Critical -
httpd24-nghttp2Red Hat An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When... 9.1 Critical -
httpd24-nghttp2Red Hat libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an... 7.5 High -
httpd24-nghttp2Red Hat Apache httpd allows remote attackers to read secret data from process memory if the Limit... 7.5 High -
httpd24-nghttp2Red Hat curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool... 6.5 Medium -
httpd24-nghttp2Red Hat When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ... 6.5 Medium -
httpd24-nghttp2Red Hat The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate... 2.4 Low -
httpd24-nghttp2Red Hat curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point... 5.9 Medium -
httpd24-nghttp2Red Hat curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names... 5.3 Medium -
httpd24-nghttp2Red Hat curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the... 5.3 Medium -
httpd24-nghttp2Red Hat A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other... 3.3 Low -
httpd24-nghttp2Red Hat The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`.... 3.7 Low -
httpd24-nghttp2Red Hat The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read... 5.3 Medium -
httpd24-nghttp2Red Hat The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow... 6.5 Medium -
httpd24-nghttp2Red Hat The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory... 5.3 Medium -
httpd24-nghttp2Red Hat The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing... 5.3 Medium -
httpd24-nghttp2Red Hat The base64 encode function in curl before version 7.51.0 is prone to a buffer being under... 3.3 Low -
httpd24-nghttp2Red Hat A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case... 3.7 Low -
httpd24-nghttp2Red Hat A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file... 5.3 Medium -
httpd24-nghttp2Red Hat Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ... 9.8 Critical -
httpd24-nghttp2Red Hat curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at... 7.5 High -
httpd24-nghttp2Red Hat Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which... 8.1 High -
httpd24-nghttp2Red Hat curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS... 7.5 High -
httpd24-nghttp2Red Hat curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate... 7.5 High