Red Hat JBoss Enterprise Application Platform 6/httpd

Red Hat · Package

17 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
httpd: bypass of mod_headers rules via chunked requestsCVE-2013-5704	Red Hat Directory Server 8/httpd Red Hat Enterprise Linux 5/httpd	Red Hat	Low	No fix reported	Not recorded
firefox: Possible integer overflow to fix inside XML_Parse in ExpatCVE-2016-9063	Red Hat Enterprise Linux 5/expat Red Hat Enterprise Linux 6/compat-expat1	Red Hat	Low	No fix reported	Not recorded
expat: Inifinite loop due to invalid XML in external entityCVE-2017-9233	Red Hat Enterprise Linux 5/expat Red Hat Enterprise Linux 5/firefox	Red Hat	Medium	No fix reported	Not recorded
apr-util: Out-of-bounds access in corrupted SDBM databaseCVE-2017-12618	Red Hat Enterprise Linux 5/apr-util Red Hat Enterprise Linux 6/apr-util	Red Hat	Medium	No fix reported	Not recorded
apr: Out-of-bounds array deref in apr_time_exp*() functionsCVE-2017-12613	Red Hat Enterprise Linux 5/apr Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	High	No fix reported	Not recorded
httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdirCVE-2016-4975	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Medium	No fix reported	Not recorded
expat: large number of colons in input makes parser consume high amount of resources, leading to DoSCVE-2018-20843	Red Hat Enterprise Linux 5/expat Red Hat Enterprise Linux 5/xmlrpc-c	Red Hat	Medium	No fix reported	Not recorded
expat: heap-based buffer over-read via crafted XML inputCVE-2019-15903	Red Hat Enterprise Linux 5/expat Red Hat Enterprise Linux 5/firefox	Red Hat	Low	No fix reported	Not recorded
httpd: NULL pointer dereference via malformed requestsCVE-2021-34798	Red Hat Enterprise Linux 6/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: Out-of-bounds write in ap_escape_quotes() via malicious inputCVE-2021-39275	Red Hat Enterprise Linux 6/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: NULL pointer dereference via crafted request during HTTP/2 request processingCVE-2021-41524	Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_lua: Possible buffer overflow when parsing multipart contentCVE-2021-44790	Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	High	No fix reported	Not recorded
httpd: possible NULL dereference or SSRF in forward proxy configurationsCVE-2021-44224	Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_lua: Use of uninitialized value of in r:parsebodyCVE-2022-22719	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: Errors encountered during the discarding of request body lead to HTTP request smugglingCVE-2022-22720	Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	High	No fix reported	Not recorded
httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721	Red Hat Enterprise Linux 6/httpd Red Hat Enterprise Linux 7/httpd	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_sed: Read/write beyond boundsCVE-2022-23943	Red Hat Enterprise Linux 7/httpd Red Hat JBoss Enterprise Application Platform 6/httpd	Red Hat	High	No fix reported	Not recorded