mod_lua vulnerabilities (TuxCare)
58 vulnerabilities.
-
mod_luaTuxCare Apache HTTP Server: mod_xml2enc crash on charset conversion failure 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_dav_fs namespace overflow 8.8 High -
mod_luaTuxCare Apache HTTP Server: mod_userdir information disclosure 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_auth_digest DoS attack 7.3 High -
mod_luaTuxCare Apache HTTP Server: mod_auth_digest one-time-nonce replay attack 8.1 High -
mod_luaTuxCare Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_vhost_alias stack overflow 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_proxy_ftp PASV address handling 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function 9.8 Critical -
mod_luaTuxCare Apache HTTP Server: mod_dav_fs property database read access 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_proxy_html: crash in dump_content 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} 9.8 Critical -
mod_luaTuxCare Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_auth_digest reauthentication attack 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_session: Session cookie not removed during internal redirect 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_heartmonitor denial of service 7.5 High -
mod_luaTuxCare Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories 3.7 Low -
mod_luaTuxCare Apache HTTP Server: mod_dav shared lock overflow 4.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_xml2enc heap overflow 7.5 High -
mod_luaTuxCare Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request` 7.3 High -
mod_luaTuxCare Apache HTTP Server: mod_proxy_html buffer overflow 7.5 High -
mod_luaTuxCare Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow 9.8 Critical -
mod_luaTuxCare Apache HTTP Server: OOB Read in `merge_response_headers` can cause crash 6.5 Medium -
mod_luaTuxCare Apache HTTP Server: mod_dav_fs protected directory access 9.1 Critical -
mod_luaTuxCare Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow 7.5 High -
mod_luaTuxCare Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp 7.3 High -
mod_luaTuxCare Apache HTTP Server: mod_proxy_ftp XSS 6.1 Medium -
mod_luaTuxCare Apache HTTP Server: mod_ldap per-dir use-after-free 9.8 Critical -
mod_luaTuxCare Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header() 9.8 Critical -
mod_luaTuxCare Apache HTTP Server: mod_dav_lock indirect lock crash 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_auth_digest timing attack 4.8 Medium -
mod_luaTuxCare Apache HTTP Server: mod_authn_socache crash 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line 6.5 Medium -
mod_luaTuxCare Apache HTTP Server: Off-by-one OOB reads in AJP getter functions 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string) 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data() 7.5 High -
mod_luaTuxCare Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr 8.8 High -
mod_luaTuxCare Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... 8.3 High -
mod_luaTuxCare Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo 5.4 Medium -
mod_luaTuxCare Apache HTTP Server: CGI environment variable override 6.5 Medium -
mod_luaTuxCare Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 6.3 Medium -
mod_luaTuxCare Apache HTTP Server: mod_ssl TLS upgrade attack 7.4 High -
mod_luaTuxCare Apache HTTP Server: SSRF on Windows due to UNC paths 7.5 High -
mod_luaTuxCare Apache HTTP Server: SSRF with mod_headers setting Content-Type header 7.5 High -
mod_luaTuxCare Apache HTTP Server: HTTP response splitting 7.5 High -
mod_luaTuxCare Apache HTTP Server: source code disclosure with handlers configured via AddType 5.3 Medium -
mod_luaTuxCare Apache HTTP Server: source code disclosure with handlers configured via AddType 6.2 Medium -
mod_luaTuxCare Apache HTTP Server: mod_rewrite proxy handler substitution 7.5 High -
mod_luaTuxCare Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request 7.5 High -
mod_luaTuxCare Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect 9.8 Critical - Show olderLoading…