Red Hat Software Collections/httpd24-httpd

Red Hat · Package

20 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
httpd: mod_dav denial of service via crafted DAV WRITE requestCVE-2013-6438	Red Hat Directory Server 8/httpd Red Hat JBoss Enterprise Application Platform 5/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoSCVE-2014-0098	Red Hat JBoss Enterprise Application Platform 5/httpd Red Hat JBoss Enterprise Web Server 1/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: LuaAuthzProvider argument handling issueCVE-2014-8109	Red Hat Enterprise Linux 7/httpd Red Hat Software Collections/httpd24-httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Use-after-free by limiting unregistered HTTP method (Optionsbleed)CVE-2017-9798	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Web Server 3/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_http2: possible crash on late upgradeCVE-2019-0197	Red Hat JBoss Enterprise Web Server 2/httpd Red Hat Software Collections/httpd24-httpd	Red Hat	Low	No fix reported	Not recorded
httpd: mod_http2: read-after-free on a string compareCVE-2019-0196	Red Hat JBoss Enterprise Web Server 2/httpd Red Hat Software Collections/httpd24-httpd	Red Hat	Low	No fix reported	Not recorded
httpd: read-after-free in h2 connection shutdownCVE-2019-10082	Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat JBoss Enterprise Web Server 2/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: memory corruption on early pushesCVE-2019-10081	Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat JBoss Enterprise Web Server 2/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy_ftp use of uninitialized valueCVE-2020-1934	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Unexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy_wstunnel tunneling of non Upgraded connectionCVE-2019-17567	Red Hat Enterprise Linux 7/httpd Red Hat Enterprise Linux 8/httpd:2.4/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_session: Heap overflow via a crafted SessionHeader valueCVE-2021-26691	Red Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat JBoss Enterprise Web Server 2/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_session: NULL pointer dereference when parsing Cookie headerCVE-2021-26690	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: Single zero byte stack overflow in mod_auth_digestCVE-2020-35452	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: mod_proxy_ajp: Possible request smugglingCVE-2022-36760	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_dav: out-of-bounds read/write of zero byteCVE-2006-20001	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_proxy: HTTP response splittingCVE-2022-37436	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd22	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_macro: out-of-bounds read vulnerabilityCVE-2023-31122	OpenShift Pipelines/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: HTTP Response Splitting in multiple modulesCVE-2024-24795	OpenShift Pipelines/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: HTTP response splittingCVE-2023-38709	OpenShift Pipelines/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Medium	No fix reported	Not recorded