httpd vulnerabilities (Red Hat)
274 vulnerabilities.
httpdRed HatJBossWeb Bayeux has reflected XSS6.1 MediumhttpdRed HatIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 HighhttpdRed HatHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 HighhttpdRed HatIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 MediumhttpdRed HatIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 MediumhttpdRed HatIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 CriticalhttpdRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 HighhttpdRed HatIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...7.5 HighhttpdRed HatA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 MediumhttpdRed HatA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 MediumhttpdRed HatIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 HighhttpdRed HatIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 HighhttpdRed HatA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 MediumhttpdRed HatIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 MediumhttpdRed HatIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 HighhttpdRed Hatmod_userdir CRLF injection6.1 MediumhttpdRed HatA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...6.5 MediumhttpdRed HatIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 CriticalhttpdRed HatA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 HighhttpdRed HatA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 MediumhttpdRed HatIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 MediumhttpdRed HatIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 HighhttpdRed HatIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 HighhttpdRed HatUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J7.5 HighhttpdRed HatUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 HighhttpdRed HatWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 HighhttpdRed HatApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 HighhttpdRed HatIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 CriticalhttpdRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 CriticalhttpdRed HatThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 HighhttpdRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 CriticalhttpdRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 CriticalhttpdRed HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.7.5 HighhttpdRed HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 HighhttpdRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 HighhttpdRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 HighhttpdRed Hatmod_cluster Denial of Service vulnerability7.5 HighhttpdRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 HighhttpdRed HatThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 HighhttpdRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 HighhttpdRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 HighhttpdRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 MediumhttpdRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 MediumhttpdRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 MediumhttpdRed HatThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 MediumhttpdRed HatThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 MediumhttpdRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 MediumhttpdRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 LowhttpdRed HatImproper Access Control in Apache WSS4J5.0 MediumhttpdRed HatThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Medium- Show moreLoading…