jbcs-httpd24-openssl-debuginfo vulnerabilities (Red Hat)
167 vulnerabilities.
jbcs-httpd24-openssl-debuginfoRed HatRead beyond bounds in ap_strcmp_match()9.1 Criticaljbcs-httpd24-openssl-debuginfoRed Hatread beyond bounds via ap_rwrite()5.3 Mediumjbcs-httpd24-openssl-debuginfoRed Hatmod_proxy_ajp: Possible request smuggling7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatlibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 Highjbcs-httpd24-openssl-debuginfoRed HatThe c_rehash script allows command injection7.3 Highjbcs-httpd24-openssl-debuginfoRed HatInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatmod_sed: Read/write beyond bounds9.8 Criticaljbcs-httpd24-openssl-debuginfoRed Hatcore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Criticaljbcs-httpd24-openssl-debuginfoRed HatHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Criticaljbcs-httpd24-openssl-debuginfoRed Hatvalid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.7.5 Highjbcs-httpd24-openssl-debuginfoRed HatNULL pointer dereference in httpd core7.5 Highjbcs-httpd24-openssl-debuginfoRed HatRead buffer overruns processing ASN.1 strings7.4 Highjbcs-httpd24-openssl-debuginfoRed HatUnexpected URL matching with 'MergeSlashes OFF'5.3 Mediumjbcs-httpd24-openssl-debuginfoRed HatApache HTTP Server mod_session response handling heap overflow9.8 Criticaljbcs-httpd24-openssl-debuginfoRed Hatmod_session NULL pointer dereference7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatmod_auth_digest possible stack overflow by one nul byte7.3 Highjbcs-httpd24-openssl-debuginfoRed Hatmod_proxy_http NULL pointer dereference7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatmod_proxy_wstunnel tunneling of non Upgraded connections5.3 Mediumjbcs-httpd24-openssl-debuginfoRed Hatcurl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed...8.1 Highjbcs-httpd24-openssl-debuginfoRed HatA flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all...6.5 Mediumjbcs-httpd24-openssl-debuginfoRed HatNokogiri Implements libxml2 version vulnerable to null pointer dereferencing5.9 Mediumjbcs-httpd24-openssl-debuginfoRed HatNokogiri Implements libxml2 version vulnerable to use-after-free8.8 Highjbcs-httpd24-openssl-debuginfoRed HatNokogiri contains libxml Out-of-bounds Write vulnerability8.6 Highjbcs-httpd24-openssl-debuginfoRed HatThere's a flaw in libxml2's xmllint in versions before 2.9.11. An attacker who is able to submit...7.8 Highjbcs-httpd24-openssl-debuginfoRed Hatcurl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to...3.7 Lowjbcs-httpd24-openssl-debuginfoRed Hatcurl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information...5.3 Mediumjbcs-httpd24-openssl-debuginfoRed HatCA certificate check bypass with X509_V_FLAG_X509_STRICT7.4 Highjbcs-httpd24-openssl-debuginfoRed HatNULL pointer deref in signature_algorithms processing5.9 Mediumjbcs-httpd24-openssl-debuginfoRed HatNull pointer deref in X509_issuer_and_serial_hash()5.9 Mediumjbcs-httpd24-openssl-debuginfoRed HatInteger overflow in CipherUpdate7.5 Highjbcs-httpd24-openssl-debuginfoRed HatA flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL...5.4 Mediumjbcs-httpd24-openssl-debuginfoRed Hatcurl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack...7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatcurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 Highjbcs-httpd24-openssl-debuginfoRed HatEDIPARTYNAME NULL pointer dereference5.9 Mediumjbcs-httpd24-openssl-debuginfoRed HatA malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting...3.7 Lowjbcs-httpd24-openssl-debuginfoRed HatApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...7.5 Highjbcs-httpd24-openssl-debuginfoRed HatApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE9.8 Criticaljbcs-httpd24-openssl-debuginfoRed Hatcurl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead...7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatlibpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled, and \X...7.5 Highjbcs-httpd24-openssl-debuginfoRed Hatlibpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.5.3 Mediumjbcs-httpd24-openssl-debuginfoRed HatIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Mediumjbcs-httpd24-openssl-debuginfoRed Hatrsaz_512_sqr overflow bug on x86_645.3 Mediumjbcs-httpd24-openssl-debuginfoRed HatHeap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.9.8 Criticaljbcs-httpd24-openssl-debuginfoRed HatDouble-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.9.8 Criticaljbcs-httpd24-openssl-debuginfoRed HatPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Lowjbcs-httpd24-openssl-debuginfoRed HatFork Protection5.3 Mediumjbcs-httpd24-openssl-debuginfoRed HatECDSA remote timing attack4.7 Mediumjbcs-httpd24-openssl-debuginfoRed HatIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...7.2 Highjbcs-httpd24-openssl-debuginfoRed HatHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...7.5 Highjbcs-httpd24-openssl-debuginfoRed HatIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...6.1 Medium- Show moreLoading…