jbcs-httpd24-mod_security vulnerabilities (Red Hat)
116 vulnerabilities.
jbcs-httpd24-mod_securityRed HatBN_mod_exp may produce incorrect results on x86_645.9 Mediumjbcs-httpd24-mod_securityRed HatTruncated packet could crash via OOB read7.5 Highjbcs-httpd24-mod_securityRed HatA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 Mediumjbcs-httpd24-mod_securityRed HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 Highjbcs-httpd24-mod_securityRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 Highjbcs-httpd24-mod_securityRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 Highjbcs-httpd24-mod_securityRed HatThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...7.5 Highjbcs-httpd24-mod_securityRed HatThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 Mediumjbcs-httpd24-mod_securityRed HatA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 Highjbcs-httpd24-mod_securityRed HatMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 Highjbcs-httpd24-mod_securityRed HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Mediumjbcs-httpd24-mod_securityRed HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...7.5 Highjbcs-httpd24-mod_securityRed HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...9.8 Criticaljbcs-httpd24-mod_securityRed HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...5.5 Mediumjbcs-httpd24-mod_securityRed HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...9.8 Criticaljbcs-httpd24-mod_securityRed HatThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...9.8 Critical