jbcs-httpd24-mod_jk-debuginfo vulnerabilities (Red Hat)
123 vulnerabilities.
-
jbcs-httpd24-mod_jk-debuginfoRed Hat Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion 7.4 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 8.3 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 5.4 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: CGI environment variable override 6.5 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_md (ACME), unintended retry intervals 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_ssl TLS upgrade attack 7.4 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_proxy_http2 denial of service 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_ssl access control bypass with session resumption 9.1 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_ssl error log variable escaping 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat ModSecurity Has Possible DoS Vulnerability 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache Tomcat Connectors: mod_jk: local users can view and modify configuration 5.9 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: mod_rewrite proxy handler substitution 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. 9.1 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server weakness with encoded question marks in backreferences 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server proxy encoding problem 8.1 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: HTTP response splitting 7.3 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat TLS certificate check bypass with mbedTLS 6.5 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat QUIC certificate check bypass with wolfSSL 6.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat HTTP/2 push headers memory-leak 8.6 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Usage of disabled protocol 3.5 Low -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST 5.9 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
jbcs-httpd24-mod_jk-debuginfoRed Hat This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed... 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Certificate policy check not enabled 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not... 4.8 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat mod_proxy SSRF 9.0 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat NULL pointer dereference in httpd core 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat Unexpected URL matching with 'MergeSlashes OFF' 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat Apache HTTP Server mod_session response handling heap overflow 9.8 Critical -
jbcs-httpd24-mod_jk-debuginfoRed Hat mod_session NULL pointer dereference 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat mod_auth_digest possible stack overflow by one nul byte 7.3 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat mod_proxy_http NULL pointer dereference 7.5 High -
jbcs-httpd24-mod_jk-debuginfoRed Hat mod_proxy_wstunnel tunneling of non Upgraded connections 5.3 Medium -
jbcs-httpd24-mod_jk-debuginfoRed Hat curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... 8.1 High - Show olderLoading…