httpd vulnerabilities (Red Hat)
274 vulnerabilities.
httpdRed HatApache HTTP Server: mod_proxy_http2 denial of service7.5 HighhttpdRed HatApache HTTP Server: mod_ssl access control bypass with session resumption9.1 CriticalhttpdRed HatApache HTTP Server: mod_ssl error log variable escaping7.5 HighhttpdRed HatApache HTTP Server: HTTP response splitting7.5 HighhttpdRed HatApache HTTP Server: mod_rewrite proxy handler substitution7.5 HighhttpdRed HatApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request7.5 HighhttpdRed HatApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect9.8 CriticalhttpdRed HatApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.9.1 CriticalhttpdRed HatApache HTTP Server weakness with encoded question marks in backreferences9.8 CriticalhttpdRed HatApache HTTP Server proxy encoding problem8.1 HighhttpdRed HatApache HTTP Server: HTTP Response Splitting in multiple modules6.3 MediumhttpdRed HatApache HTTP Server: HTTP response splitting7.3 HighhttpdRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 HighhttpdRed HatApache HTTP Server: mod_macro buffer over-read7.5 HighhttpdRed HatApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 MediumhttpdRed HatApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 HighhttpdRed HatApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 CriticalhttpdRed HatApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 MediumhttpdRed HatApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 CriticalhttpdRed HatApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 HighhttpdRed Hatmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 CriticalhttpdRed HatInformation Disclosure in mod_lua with websockets7.5 HighhttpdRed Hatmod_sed denial of service7.5 HighhttpdRed HatDenial of service in mod_lua r:parsebody7.5 HighhttpdRed HatRead beyond bounds in ap_strcmp_match()9.1 CriticalhttpdRed Hatread beyond bounds via ap_rwrite()5.3 MediumhttpdRed Hatmod_proxy_ajp: Possible request smuggling7.5 HighhttpdRed Hatmod_sed: Read/write beyond bounds9.8 CriticalhttpdRed Hatcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 CriticalhttpdRed HatHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 CriticalhttpdRed Hatmod_lua Use of uninitialized value of in r:parsebody7.5 HighhttpdRed HatPossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 HighhttpdRed HatPossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 CriticalhttpdRed HatMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...9.8 CriticalhttpdRed Hatmod_proxy SSRF9.0 CriticalhttpdRed Hatap_escape_quotes buffer overflow9.8 CriticalhttpdRed Hatmod_proxy_uwsgi out of bound read7.5 HighhttpdRed HatNULL pointer dereference in httpd core7.5 HighhttpdRed HatRequest splitting via HTTP/2 method injection and mod_proxy7.5 HighhttpdRed HatUnexpected URL matching with 'MergeSlashes OFF'5.3 MediumhttpdRed HatApache HTTP Server mod_session response handling heap overflow9.8 CriticalhttpdRed Hatmod_session NULL pointer dereference7.5 HighhttpdRed Hatmod_auth_digest possible stack overflow by one nul byte7.3 HighhttpdRed Hatmod_proxy_http NULL pointer dereference7.5 HighhttpdRed HatIP address spoofing when proxying using mod_remoteip and mod_rewrite For configurations using...5.3 MediumhttpdRed HatApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 HighhttpdRed HatApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 CriticalhttpdRed HatApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...7.5 HighhttpdRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 MediumhttpdRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Medium- Show moreLoading…