Red Hat Enterprise Linux 7/httpd

Red Hat · Package

53 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Apache HTTP Server via mod_proxy_uwsgi HTTP response smugglingCVE-2023-27522 · GHSA-VCPH-37MH-FQRHVersion ranges need review.	uwsgi Red Hat Enterprise Linux 6/httpd	PyPIRed Hat	High	Fix reported	2026-07-07
httpd: LuaAuthzProvider argument handling issueCVE-2014-8109	Red Hat Enterprise Linux 7/httpd Red Hat Software Collections/httpd24-httpd	Red Hat	Low	No fix reported	Not recorded
httpd: limited cross-site scripting in mod_proxy error pageCVE-2019-10092	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Unexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy_wstunnel tunneling of non Upgraded connectionCVE-2019-17567	Red Hat Enterprise Linux 7/httpd Red Hat Enterprise Linux 8/httpd:2.4/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_session: NULL pointer dereference when parsing Cookie headerCVE-2021-26690	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: Single zero byte stack overflow in mod_auth_digestCVE-2020-35452	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Request splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-pathCVE-2021-36160	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_lua: Use of uninitialized value of in r:parsebodyCVE-2022-22719	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_sed: Read/write beyond boundsCVE-2022-23943	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	High	No fix reported	Not recorded
httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_sed: DoS vulnerabilityCVE-2022-30522	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_lua: DoS in r:parsebodyCVE-2022-29404	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: Out-of-bounds read in ap_strcmp_match()CVE-2022-28615	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Out-of-bounds read via ap_rwrite()CVE-2022-28614	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: mod_proxy_ajp: Possible request smugglingCVE-2022-26377	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy_ajp: Possible request smugglingCVE-2022-36760	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_dav: out-of-bounds read/write of zero byteCVE-2006-20001	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded