jbcs-httpd24-mod_security-debuginfo vulnerabilities (Red Hat)
116 vulnerabilities.
jbcs-httpd24-mod_security-debuginfoRed HatNokogiri Implements libxml2 version vulnerable to use-after-free8.8 Highjbcs-httpd24-mod_security-debuginfoRed HatNokogiri contains libxml Out-of-bounds Write vulnerability8.6 Highjbcs-httpd24-mod_security-debuginfoRed HatThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...7.8 Highjbcs-httpd24-mod_security-debuginfoRed Hatcurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 Lowjbcs-httpd24-mod_security-debuginfoRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highjbcs-httpd24-mod_security-debuginfoRed HatNULL pointer deref in signature_algorithms processing5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatInteger overflow in CipherUpdate7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatA flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL...5.4 Mediumjbcs-httpd24-mod_security-debuginfoRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 Highjbcs-httpd24-mod_security-debuginfoRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatEDIPARTYNAME NULL pointer dereference5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 Lowjbcs-httpd24-mod_security-debuginfoRed HatApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticaljbcs-httpd24-mod_security-debuginfoRed Hatcurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 Highjbcs-httpd24-mod_security-debuginfoRed Hatlibpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X...7.5 Highjbcs-httpd24-mod_security-debuginfoRed Hatlibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatDenial of service in nghttp23.7 Lowjbcs-httpd24-mod_security-debuginfoRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed Hatlibxml as used in Nokogiri has an infinite loop in a certain end-of-file situation7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatxmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatxmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related...7.5 Highjbcs-httpd24-mod_security-debuginfoRed Hatrsaz_512_sqr overflow bug on x86_645.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Criticaljbcs-httpd24-mod_security-debuginfoRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Criticaljbcs-httpd24-mod_security-debuginfoRed HatIn libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatAn integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and...3.7 Lowjbcs-httpd24-mod_security-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediumjbcs-httpd24-mod_security-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highjbcs-httpd24-mod_security-debuginfoRed HatSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...4.7 Mediumjbcs-httpd24-mod_security-debuginfoRed HatTiming attack against DSA5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed Hatmod_userdir CRLF injection6.1 Mediumjbcs-httpd24-mod_security-debuginfoRed HatCache timing vulnerability in RSA Key Generation5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatApache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input...4.3 Mediumjbcs-httpd24-mod_security-debuginfoRed HatThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 Mediumjbcs-httpd24-mod_security-debuginfoRed HatThere is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1...6.5 Mediumjbcs-httpd24-mod_security-debuginfoRed HatBuffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.9.8 Criticaljbcs-httpd24-mod_security-debuginfoRed HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.7.5 High- Show moreLoading…