jbcs-httpd24-nghttp2-debuginfo vulnerabilities (Red Hat)
103 vulnerabilities.
-
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_http2 denial of service 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_md unrestricted OCSP response 7.3 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() 9.8 Critical -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_dav_lock indirect lock crash 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_authn_socache crash 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: Off-by-one OOB reads in AJP getter functions 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data() 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat nghttp2 Denial of service: Assertion failure due to the missing state validation 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: HTTP/2 DoS by Memory Increase 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat TLS certificate check bypass with mbedTLS 6.5 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat QUIC certificate check bypass with wolfSSL 6.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat HTTP/2 push headers memory-leak 8.6 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Usage of disabled protocol 3.5 Low -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not... 4.8 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier 9.8 Critical -
jbcs-httpd24-nghttp2-debuginfoRed Hat valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes. 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat NULL pointer dereference in httpd core 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Unexpected URL matching with 'MergeSlashes OFF' 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server mod_session response handling heap overflow 9.8 Critical -
jbcs-httpd24-nghttp2-debuginfoRed Hat mod_session NULL pointer dereference 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat mod_auth_digest possible stack overflow by one nul byte 7.3 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat mod_proxy_http NULL pointer dereference 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat mod_proxy_wstunnel tunneling of non Upgraded connections 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed... 8.1 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all... 6.5 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing 5.9 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Nokogiri Implements libxml2 version vulnerable to use-after-free 8.8 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Nokogiri contains libxml Out-of-bounds Write vulnerability 8.6 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat There's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit... 7.8 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to... 3.7 Low -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information... 5.3 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat CA certificate check bypass with X509_V_FLAG_X509_STRICT 7.4 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat NULL pointer deref in signature_algorithms processing 5.9 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat Integer overflow in CipherUpdate 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL... 5.4 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack... 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to... 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat EDIPARTYNAME NULL pointer dereference 5.9 Medium -
jbcs-httpd24-nghttp2-debuginfoRed Hat A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting... 3.7 Low -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module... 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE 9.8 Critical -
jbcs-httpd24-nghttp2-debuginfoRed Hat curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead... 7.5 High -
jbcs-httpd24-nghttp2-debuginfoRed Hat libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X... 7.5 High - Show olderLoading…