jbcs-httpd24-apr-debuginfo vulnerabilities (Red Hat)
80 vulnerabilities.
-
jbcs-httpd24-apr-debuginfoRed Hat An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
jbcs-httpd24-apr-debuginfoRed Hat An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... 5.9 Medium -
jbcs-httpd24-apr-debuginfoRed Hat A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 9.8 Critical -
jbcs-httpd24-apr-debuginfoRed Hat In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp Possible request smuggling 9.0 Critical -
jbcs-httpd24-apr-debuginfoRed Hat A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not... 4.8 Medium -
jbcs-httpd24-apr-debuginfoRed Hat NULL pointer dereference in httpd core 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
jbcs-httpd24-apr-debuginfoRed Hat Unexpected URL matching with 'MergeSlashes OFF' 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP Server mod_session response handling heap overflow 9.8 Critical -
jbcs-httpd24-apr-debuginfoRed Hat mod_session NULL pointer dereference 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat mod_auth_digest possible stack overflow by one nul byte 7.3 High -
jbcs-httpd24-apr-debuginfoRed Hat mod_proxy_http NULL pointer dereference 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat mod_proxy_wstunnel tunneling of non Upgraded connections 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... 8.1 High -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to... 3.7 Low -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information... 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
jbcs-httpd24-apr-debuginfoRed Hat Integer overflow in CipherUpdate 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL... 5.4 Medium -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting... 3.7 Low -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE 9.8 Critical -
jbcs-httpd24-apr-debuginfoRed Hat curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended... 6.1 Medium -
jbcs-httpd24-apr-debuginfoRed Hat rsaz_512_sqr overflow bug on x86_64 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. 9.8 Critical -
jbcs-httpd24-apr-debuginfoRed Hat Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. 9.8 Critical -
jbcs-httpd24-apr-debuginfoRed Hat Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey 3.7 Low -
jbcs-httpd24-apr-debuginfoRed Hat Fork Protection 5.3 Medium -
jbcs-httpd24-apr-debuginfoRed Hat ECDSA remote timing attack 4.7 Medium -
jbcs-httpd24-apr-debuginfoRed Hat In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted... 7.2 High -
jbcs-httpd24-apr-debuginfoRed Hat HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",... 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended... 6.1 Medium -
jbcs-httpd24-apr-debuginfoRed Hat In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting... 6.1 Medium -
jbcs-httpd24-apr-debuginfoRed Hat In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling... 9.1 Critical -
jbcs-httpd24-apr-debuginfoRed Hat Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
jbcs-httpd24-apr-debuginfoRed Hat An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and... 3.7 Low -
jbcs-httpd24-apr-debuginfoRed Hat A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a... 4.2 Medium - Show olderLoading…