libtcnative-1-0 vulnerabilities (SUSE)
30 vulnerabilities.
-
libtcnative-1-0SUSE Apache Tomcat: HTTP/2 request/response mix-up after error during async processing 9.1 Critical -
libtcnative-1-0SUSE Apache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms 9.1 Critical -
libtcnative-1-0SUSE Apache Tomcat: Possible TLS 1.3 connection failures 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: HTTP/2 trailer header cross-contamination 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets - Fix for CVE-2026-65183 did not address APR connector 8.1 High -
libtcnative-1-0SUSE Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) 6.1 Medium -
libtcnative-1-0SUSE Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up 6.5 Medium -
libtcnative-1-0SUSE Apache Tomcat Native: Client certificate requirements can be down-graded 7.4 High -
libtcnative-1-0SUSE Apache Tomcat Native: Insecure OpenSSL options enabled 9.1 Critical -
libtcnative-1-0SUSE Apache Tomcat Native: DoS via TLS handshake 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: WebSocket message smuggling with per-message-deflate 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up 9.1 Critical -
libtcnative-1-0SUSE Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled 9.8 Critical -
libtcnative-1-0SUSE Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: HTTP/2 DoS via malformed request 7.3 High -
libtcnative-1-0SUSE Apache Tomcat: AJP DoS via missing request body 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: DoS via busy wait during WebSocket close 7.5 High -
libtcnative-1-0SUSE Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request 8.1 High -
libtcnative-1-0SUSE Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests 3.7 Low -
libtcnative-1-0SUSE Apache Tomcat: Bypass of security constraints for WebSocket endpoints 9.8 Critical -
libtcnative-1-0SUSE Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured 7.3 High -
libtcnative-1-0SUSE Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore 6.5 Medium -
libtcnative-1-0SUSE Apache Tomcat: HTTP/2 request headers not validated 9.8 Critical -
libtcnative-1-0SUSE Apache Portable Runtime (APR): Unexpected lax shared memory permissions 5.5 Medium -
libtcnative-1-0SUSE Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 has a flaw that does not properly check... 7.4 High -
libtcnative-1-0SUSE When using an OCSP responder Apache Tomcat Native 1.2.0 to 1.2.16 and 1.1.23 to 1.1.34 did not... 7.4 High -
libtcnative-1-0SUSE When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2... 5.9 Medium -
libtcnative-1-0SUSE When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field... 7.1 High -
libtcnative-1-0SUSE Security update for libtcnative-1-0 No score -
libtcnative-1-0SUSE The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on... 3.7 Low