jbcs-httpd24-libcurl vulnerabilities (Red Hat)
123 vulnerabilities.
-
jbcs-httpd24-libcurlRed Hat Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 8.3 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 5.4 Medium -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: CGI environment variable override 6.5 Medium -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_md (ACME), unintended retry intervals 7.5 High -
jbcs-httpd24-libcurlRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
jbcs-httpd24-libcurlRed Hat Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
jbcs-httpd24-libcurlRed Hat TLS certificate check bypass with mbedTLS 6.5 Medium -
jbcs-httpd24-libcurlRed Hat QUIC certificate check bypass with wolfSSL 6.3 Medium -
jbcs-httpd24-libcurlRed Hat HTTP/2 push headers memory-leak 8.6 High -
jbcs-httpd24-libcurlRed Hat Usage of disabled protocol 3.5 Low -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
jbcs-httpd24-libcurlRed Hat Mod_cluster/mod_proxy_cluster: stored cross site scripting 5.4 Medium -
jbcs-httpd24-libcurlRed Hat When saving HSTS data to an excessively long file name, curl could end up removing all contents,... 5.3 Medium -
jbcs-httpd24-libcurlRed Hat This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
jbcs-httpd24-libcurlRed Hat Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_macro buffer over-read 7.5 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST 5.9 Medium -
jbcs-httpd24-libcurlRed Hat This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
jbcs-httpd24-libcurlRed Hat This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
jbcs-httpd24-libcurlRed Hat Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request 7.5 High -
jbcs-httpd24-libcurlRed Hat When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed... 7.5 High -
jbcs-httpd24-libcurlRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
jbcs-httpd24-libcurlRed Hat An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,... 3.7 Low -
jbcs-httpd24-libcurlRed Hat An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports... 5.9 Medium -
jbcs-httpd24-libcurlRed Hat A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to... 7.5 High -
jbcs-httpd24-libcurlRed Hat Certificate policy check not enabled 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
jbcs-httpd24-libcurlRed Hat A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
jbcs-httpd24-libcurlRed Hat A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting 7.5 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy 9.8 Critical -
jbcs-httpd24-libcurlRed Hat An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... 6.5 Medium -
jbcs-httpd24-libcurlRed Hat A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 6.5 Medium -
jbcs-httpd24-libcurlRed Hat A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 9.1 Critical -
jbcs-httpd24-libcurlRed Hat X.400 address type confusion in X.509 GeneralName 7.4 High -
jbcs-httpd24-libcurlRed Hat Use-after-free following BIO_new_NDEF 7.5 High -
jbcs-httpd24-libcurlRed Hat Double free after calling PEM_read_bio_ex 7.5 High -
jbcs-httpd24-libcurlRed Hat Timing Oracle in RSA Decryption 5.9 Medium -
jbcs-httpd24-libcurlRed Hat Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions 6.5 Medium -
jbcs-httpd24-libcurlRed Hat Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 9.8 Critical -
jbcs-httpd24-libcurlRed Hat In ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can... 7.5 High -
jbcs-httpd24-libcurlRed Hat In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed... 7.5 High -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting 5.3 Medium -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_proxy_ajp Possible request smuggling 9.0 Critical -
jbcs-httpd24-libcurlRed Hat Apache HTTP Server: mod_dav out of bounds read, or write of zero byte 7.5 High -
jbcs-httpd24-libcurlRed Hat A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium - Show olderLoading…