jbcs-httpd24-openssl-libs-debuginfo vulnerabilities (Red Hat)
75 vulnerabilities.
-
jbcs-httpd24-openssl-libs-debuginfoRed Hat Mod_cluster/mod_proxy_cluster: stored cross site scripting 5.4 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When saving HSTS data to an excessively long file name, curl could end up removing all contents,... 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back... 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache HTTP Server: mod_macro buffer over-read 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST 5.9 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat This flaw allows an attacker to insert cookies at will into a running program using libcurl, if... 3.7 Low -
jbcs-httpd24-openssl-libs-debuginfoRed Hat This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is... 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed... 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Certificate policy check not enabled 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~)... 8.8 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A vulnerability in input validation exists in curl <8.0 during communication using the TELNET... 8.8 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0... 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that... 9.1 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat X.400 address type confusion in X.509 GeneralName 7.4 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Use-after-free following BIO_new_NDEF 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Double free after calling PEM_read_bio_ex 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Timing Oracle in RSA Decryption 5.9 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Apache HTTP Server: mod_dav out of bounds read, or write of zero byte 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually... 5.9 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep... 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using... 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a... 8.1 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When doing HTTP(S) transfers, libcurl might erroneously use the read callback (... 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using... 3.7 Low -
jbcs-httpd24-openssl-libs-debuginfoRed Hat A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not... 4.8 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures... 5.9 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation... 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can... 6.5 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat The c_rehash script allows command injection 7.3 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat mod_sed denial of service 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Read beyond bounds in ap_strcmp_match() 9.1 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat read beyond bounds via ap_rwrite() 5.3 Medium -
jbcs-httpd24-openssl-libs-debuginfoRed Hat mod_proxy_ajp: Possible request smuggling 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be... 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat The c_rehash script allows command injection 7.3 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
jbcs-httpd24-openssl-libs-debuginfoRed Hat mod_sed: Read/write beyond bounds 9.8 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody 9.1 Critical -
jbcs-httpd24-openssl-libs-debuginfoRed Hat HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier 9.8 Critical - Show olderLoading…