Skip to content

jbcs-httpd24-mod_ssl vulnerabilities (Red Hat)

220 vulnerabilities.

jbcs-httpd24-mod_ssl Red HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.CVE-2016-44597.5 HighApril 12, 2017
jbcs-httpd24-mod_ssl Red HatBN_mod_exp may produce incorrect results on x86_64CVE-2017-3732Fix availableEPSS 15.4%5.9 MediumJanuary 26, 2017
jbcs-httpd24-mod_ssl Red HatTruncated packet could crash via OOB readCVE-2017-3731Fix availableEPSS 57.3%7.5 HighJanuary 26, 2017
jbcs-httpd24-mod_ssl Red HatA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 MediumDecember 31, 2016
jbcs-httpd24-mod_ssl Red HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 HighDecember 22, 2016
jbcs-httpd24-mod_ssl Red HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...CVE-2016-2161Fix availableEPSS 21.0%7.5 HighDecember 22, 2016
jbcs-httpd24-mod_ssl Red HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...CVE-2016-0736Public exploitFix availableEPSS 49.0%7.5 HighDecember 22, 2016
jbcs-httpd24-mod_ssl Red HatThe mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols...CVE-2016-8740Public exploitFix availableEPSS 79.1%7.5 HighDecember 5, 2016
jbcs-httpd24-mod_ssl Red HatThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...CVE-2016-7055Fix availableEPSS 14.2%5.9 MediumNovember 11, 2016
jbcs-httpd24-mod_ssl Red HatA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...CVE-2016-8610Public exploitFix availableEPSS 39.9%7.5 HighOctober 24, 2016
jbcs-httpd24-mod_ssl Red HatMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...CVE-2016-6304Fix availableEPSS 63.0%7.5 HighSeptember 22, 2016
jbcs-httpd24-mod_ssl Red HatThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...CVE-2016-6306Fix availableEPSS 41.7%5.9 MediumSeptember 21, 2016
jbcs-httpd24-mod_ssl Red HatThe tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the...CVE-2016-6302Fix availableEPSS 27.8%7.5 HighSeptember 16, 2016
jbcs-httpd24-mod_ssl Red HatThe BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate...CVE-2016-2182Fix availableEPSS 44.2%9.8 CriticalSeptember 16, 2016
jbcs-httpd24-mod_ssl Red HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 HighAugust 31, 2016
jbcs-httpd24-mod_ssl Red HatThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 HighJuly 18, 2016
jbcs-httpd24-mod_ssl Red HatThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...CVE-2016-2178Fix available5.5 MediumJune 19, 2016
jbcs-httpd24-mod_ssl Red HatOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...CVE-2016-2177Fix availableEPSS 44.5%9.8 CriticalJune 19, 2016
jbcs-httpd24-mod_ssl Red HatThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...CVE-2016-2108Fix availableEPSS 77.9%9.8 CriticalMay 3, 2016
jbcs-httpd24-mod_ssl Red HatThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...CVE-2015-3185Fix availableEPSS 16.3%4.3 MediumJuly 20, 2015