jbcs-httpd24-mod_ldap-debuginfo vulnerabilities (Red Hat)
134 vulnerabilities.
jbcs-httpd24-mod_ldap-debuginfoRed HatTLS certificate check bypass with mbedTLS6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatQUIC certificate check bypass with wolfSSL6.3 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatHTTP/2 push headers memory-leak8.6 Highjbcs-httpd24-mod_ldap-debuginfoRed HatUsage of disabled protocol3.5 Lowjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatMod_cluster/mod_proxy_cluster: stored cross site scripting5.4 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatWhen saving HSTS data to an excessively long file name, curl could end up removing all contents,...5.3 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatThis flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back...6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatExcessive time spent in DH check / generation with large Q parameter value5.3 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: mod_macro buffer over-read7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatAn information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers,...3.7 Lowjbcs-httpd24-mod_ldap-debuginfoRed HatAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatA use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatA path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)...8.8 Highjbcs-httpd24-mod_ldap-debuginfoRed HatA vulnerability in input validation exists in curl <8.0 during communication using the TELNET...8.8 Highjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: mod_proxy_uwsgi HTTP response splitting7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy9.8 Criticaljbcs-httpd24-mod_ldap-debuginfoRed HatAn allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0...6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatA cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that...9.1 Criticaljbcs-httpd24-mod_ldap-debuginfoRed HatX.400 address type confusion in X.509 GeneralName7.4 Highjbcs-httpd24-mod_ldap-debuginfoRed HatUse-after-free following BIO_new_NDEF7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatDouble free after calling PEM_read_bio_ex7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatTiming Oracle in RSA Decryption5.9 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatApache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatApache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions9.8 Criticaljbcs-httpd24-mod_ldap-debuginfoRed HatIn ModSecurity before 2.9.7, FILES_TMP_CONTENT sometimes lacked the complete content. This can...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting5.3 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: mod_proxy_ajp Possible request smuggling9.0 Criticaljbcs-httpd24-mod_ldap-debuginfoRed HatApache HTTP Server: mod_dav out of bounds read, or write of zero byte7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatIn curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed Hatcurl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a...8.1 Highjbcs-httpd24-mod_ldap-debuginfoRed HatWhen doing HTTP(S) transfers, libcurl might erroneously use the read callback (...9.8 Criticaljbcs-httpd24-mod_ldap-debuginfoRed HatWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Lowjbcs-httpd24-mod_ldap-debuginfoRed HatA flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not...4.8 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 Criticaljbcs-httpd24-mod_ldap-debuginfoRed Hatcurl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can...6.5 Mediumjbcs-httpd24-mod_ldap-debuginfoRed HatThe c_rehash script allows command injection7.3 Highjbcs-httpd24-mod_ldap-debuginfoRed Hatmod_proxy X-Forwarded-For dropped by hop-by-hop mechanism9.8 Criticaljbcs-httpd24-mod_ldap-debuginfoRed Hatmod_sed denial of service7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatRead beyond bounds in ap_strcmp_match()9.1 Criticaljbcs-httpd24-mod_ldap-debuginfoRed Hatread beyond bounds via ap_rwrite()5.3 Mediumjbcs-httpd24-mod_ldap-debuginfoRed Hatmod_proxy_ajp: Possible request smuggling7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed Hatlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 Highjbcs-httpd24-mod_ldap-debuginfoRed HatThe c_rehash script allows command injection7.3 Highjbcs-httpd24-mod_ldap-debuginfoRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 High- Show moreLoading…