jbcs-httpd24-mod_http2-debuginfo vulnerabilities (Red Hat)
139 vulnerabilities.
jbcs-httpd24-mod_http2-debuginfoRed HatHTTP/2 push headers memory-leak8.6 Highjbcs-httpd24-mod_http2-debuginfoRed HatUsage of disabled protocol3.5 Lowjbcs-httpd24-mod_http2-debuginfoRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatThis flaw allows an attacker to insert cookies at will into a running program using libcurl, if...3.7 Lowjbcs-httpd24-mod_http2-debuginfoRed HatThis flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is...9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed HatApache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatWhen curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatExcessive time spent checking DH q parameter value5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatExcessive time spent checking DH keys and parameters5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatPossible DoS translating ASN.1 object identifiers6.5 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatCertificate policy check not enabled5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatInvalid certificate policies in leaf certificates are silently ignored5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatExcessive Resource Usage Verifying X.509 Policy Constraints7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 Highjbcs-httpd24-mod_http2-debuginfoRed HatWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed HatWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Lowjbcs-httpd24-mod_http2-debuginfoRed HatA flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not...4.8 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatThe c_rehash script allows command injection7.3 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatmod_sed denial of service7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatRead beyond bounds in ap_strcmp_match()9.1 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatread beyond bounds via ap_rwrite()5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed Hatmod_proxy_ajp: Possible request smuggling7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatThe c_rehash script allows command injection7.3 Highjbcs-httpd24-mod_http2-debuginfoRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_sed: Read/write beyond bounds9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticaljbcs-httpd24-mod_http2-debuginfoRed HatHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatvalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_proxy SSRF9.0 Criticaljbcs-httpd24-mod_http2-debuginfoRed HatNULL pointer dereference in httpd core7.5 Highjbcs-httpd24-mod_http2-debuginfoRed HatRead buffer overruns processing ASN.1 strings7.4 Highjbcs-httpd24-mod_http2-debuginfoRed HatUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatApache HTTP Server mod_session response handling heap overflow9.8 Criticaljbcs-httpd24-mod_http2-debuginfoRed Hatmod_session NULL pointer dereference7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_auth_digest possible stack overflow by one nul byte7.3 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_proxy_http NULL pointer dereference7.5 Highjbcs-httpd24-mod_http2-debuginfoRed Hatmod_proxy_wstunnel tunneling of non Upgraded connections5.3 Mediumjbcs-httpd24-mod_http2-debuginfoRed Hatcurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 Highjbcs-httpd24-mod_http2-debuginfoRed HatA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...6.5 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatNokogiri Implements libxml2 version vulnerable to null pointer dereferencing5.9 Mediumjbcs-httpd24-mod_http2-debuginfoRed HatNokogiri Implements libxml2 version vulnerable to use-after-free8.8 Highjbcs-httpd24-mod_http2-debuginfoRed HatNokogiri contains libxml Out-of-bounds Write vulnerability8.6 Highjbcs-httpd24-mod_http2-debuginfoRed HatThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...7.8 High- Show moreLoading…