mod_ssl vulnerabilities (Red Hat)
269 vulnerabilities.
mod_sslRed HatIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...9.1 Criticalmod_sslRed HatSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service7.5 Highmod_sslRed HatIn Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location...7.5 Highmod_sslRed HatA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...4.2 Mediummod_sslRed HatA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...5.3 Mediummod_sslRed HatIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...7.5 Highmod_sslRed HatIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...7.8 Highmod_sslRed HatA vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the...5.3 Mediummod_sslRed HatIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...5.3 Mediummod_sslRed HatIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...7.5 Highmod_sslRed Hatmod_userdir CRLF injection6.1 Mediummod_sslRed HatA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing...6.5 Mediummod_sslRed HatIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...9.8 Criticalmod_sslRed HatA specially crafted HTTP request header could have crashed the Apache HTTP Server prior to...7.5 Highmod_sslRed HatA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...5.9 Mediummod_sslRed HatIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...5.3 Mediummod_sslRed HatIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...8.1 Highmod_sslRed HatIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...7.5 Highmod_sslRed HatUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J7.5 Highmod_sslRed HatUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 Highmod_sslRed HatWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 Highmod_sslRed HatApache httpd allows remote attackers to read secret data from process memory if the Limit...7.5 Highmod_sslRed HatIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 Criticalmod_sslRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Criticalmod_sslRed HatThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 Highmod_sslRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Criticalmod_sslRed HatIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Criticalmod_sslRed HatStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.7.5 Highmod_sslRed HatApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...7.5 Highmod_sslRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the...7.5 Highmod_sslRed HatIn Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie...7.5 Highmod_sslRed Hatmod_cluster Denial of Service vulnerability7.5 Highmod_sslRed HatThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...7.5 Highmod_sslRed HatThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...8.1 Highmod_sslRed HatInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...7.5 Highmod_sslRed HatInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...7.5 Highmod_sslRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Mediummod_sslRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 Mediummod_sslRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 Mediummod_sslRed HatThe ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4...4.3 Mediummod_sslRed HatThe chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not...5.0 Mediummod_sslRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediummod_sslRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 Lowmod_sslRed HatImproper Access Control in Apache WSS4J5.0 Mediummod_sslRed HatThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...5.0 Mediummod_sslRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediummod_sslRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediummod_sslRed HatThe cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the...4.3 Mediummod_sslRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediummod_sslRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Medium- Show moreLoading…