jbcs-httpd24-mod_cluster-native vulnerabilities (Red Hat)
101 vulnerabilities.
jbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...6.1 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticaljbcs-httpd24-mod_cluster-nativeRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 Lowjbcs-httpd24-mod_cluster-nativeRed HatA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediumjbcs-httpd24-mod_cluster-nativeRed HatA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Mediumjbcs-httpd24-mod_cluster-nativeRed HatThe Apache Web Server (httpd) specific code that normalised the requested path before matching it...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatTiming attack against DSA5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed Hatmod_userdir CRLF injection6.1 Mediumjbcs-httpd24-mod_cluster-nativeRed HatDoS for HTTP/2 connections by crafted requests7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatCache timing vulnerability in RSA Key Generation5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed Hatnghttp2 version >= 1.10.0 and nghttp2 <= v1.31.0 contains an Improper Input Validation CWE-20...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatConstructed ASN.1 types with a recursive definition could exceed the stack6.5 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatWhen an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Mediumjbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 Highjbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatApache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input...4.3 Mediumjbcs-httpd24-mod_cluster-nativeRed HatThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediumjbcs-httpd24-mod_cluster-nativeRed HatWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...7.1 Highjbcs-httpd24-mod_cluster-nativeRed HatApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatBuffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatBN_mod_exp may produce incorrect results on x86_645.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatTruncated packet could crash via OOB read7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Mediumjbcs-httpd24-mod_cluster-nativeRed HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 Highjbcs-httpd24-mod_cluster-nativeRed HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 Criticaljbcs-httpd24-mod_cluster-nativeRed HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Mediumjbcs-httpd24-mod_cluster-nativeRed HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 Critical- Show moreLoading…