jbcs-httpd24-mod_rt vulnerabilities (Red Hat)

16 vulnerabilities.

• jbcs-httpd24-mod_rt Red Hat mod_userdir CRLF injection CVE-2016-4975 Fix available EPSS 19.9% 6.1 MediumAugust 14, 2018
• jbcs-httpd24-mod_rt Red Hat Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input... CVE-2016-8612 4.3 MediumMarch 9, 2018
• jbcs-httpd24-mod_rt Red Hat There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation... CVE-2017-3738 Fix available EPSS 13.4% 5.9 MediumDecember 7, 2017
• jbcs-httpd24-mod_rt Red Hat OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent... CVE-2017-3737 Fix available EPSS 78.7% 5.9 MediumDecember 7, 2017
• jbcs-httpd24-mod_rt Red Hat There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1... CVE-2017-3736 Fix available EPSS 10.1% 6.5 MediumNovember 2, 2017
• jbcs-httpd24-mod_rt Red Hat Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42. CVE-2016-6808 EPSS 22.7% 9.8 CriticalApril 12, 2017
• jbcs-httpd24-mod_rt Red Hat Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9. CVE-2016-4459 7.5 HighApril 12, 2017
• jbcs-httpd24-mod_rt Red Hat BN_mod_exp may produce incorrect results on x86_64 CVE-2017-3732 Fix available EPSS 15.4% 5.9 MediumJanuary 26, 2017
• jbcs-httpd24-mod_rt Red Hat Truncated packet could crash via OOB read CVE-2017-3731 Fix available EPSS 57.3% 7.5 HighJanuary 26, 2017
• jbcs-httpd24-mod_rt Red Hat There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in... CVE-2016-7055 Fix available EPSS 14.2% 5.9 MediumNovember 11, 2016
• jbcs-httpd24-mod_rt Red Hat The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote... CVE-2016-6306 Fix available EPSS 41.7% 5.9 MediumSeptember 21, 2016
• jbcs-httpd24-mod_rt Red Hat The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the... CVE-2016-6302 Fix available EPSS 27.8% 7.5 HighSeptember 16, 2016
• jbcs-httpd24-mod_rt Red Hat The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate... CVE-2016-2182 Fix available EPSS 44.2% 9.8 CriticalSeptember 16, 2016
• jbcs-httpd24-mod_rt Red Hat The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly... CVE-2016-2178 Fix available 5.5 MediumJune 19, 2016
• jbcs-httpd24-mod_rt Red Hat OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which... CVE-2016-2177 Fix available EPSS 44.5% 9.8 CriticalJune 19, 2016
• jbcs-httpd24-mod_rt Red Hat The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers... CVE-2016-2108 Fix available EPSS 77.9% 9.8 CriticalMay 3, 2016