Red Hat JBoss Enterprise Web Server 2/httpd

Red Hat · Package

37 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
httpd: allows local users to overwrite arbitrary files via a symlink attackCVE-2001-0131	Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat JBoss Enterprise Web Server 2/httpd	Red Hat	Low	No fix reported	Not recorded
pcre: Integer overflow caused by missing check for certain conditions (8.38/31)CVE-2015-8394	Red Hat Directory Server 8/pcre Red Hat Enterprise Linux 5/pcre	Red Hat	Unknown	No fix reported	Not recorded
pcre: Integer overflow in subroutine calls (8.38/8)CVE-2015-8387	Red Hat Directory Server 8/pcre Red Hat Enterprise Linux 5/pcre	Red Hat	Unknown	No fix reported	Not recorded
pcre: Buffer overflow caused by lookbehind assertion (8.38/6)CVE-2015-8386	Red Hat Directory Server 8/pcre Red Hat Enterprise Linux 5/pcre	Red Hat	Low	No fix reported	Not recorded
pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)CVE-2017-6004	Red Hat Enterprise Linux 7/pcre Red Hat JBoss Enterprise Web Server 1/httpd	Red Hat	Medium	No fix reported	Not recorded
pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)CVE-2017-7186	Red Hat Enterprise Linux 7/pcre Red Hat JBoss Enterprise Web Server 1/httpd	Red Hat	Medium	No fix reported	Not recorded
pcre: stack-based buffer overflow write in pcre32_copy_substringCVE-2017-7246	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
pcre: stack-based buffer overflow write in pcre32_copy_substringCVE-2017-7245	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)CVE-2017-7244	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
expat: Inifinite loop due to invalid XML in external entityCVE-2017-9233	Red Hat Enterprise Linux 5/expat Red Hat Enterprise Linux 5/firefox	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_mime buffer overreadCVE-2017-7679	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 5/jbossas	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_ssl NULL pointer dereferenceCVE-2017-3169	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 6/jbossas	Red Hat	Medium	No fix reported	Not recorded
httpd: ap_get_basic_auth_pw() authentication bypassCVE-2017-3167	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 6/jbossas	Red Hat	Medium	No fix reported	Not recorded
pcre: OP_KETRMAX feature in the match function in pcre_exec.cCVE-2017-11164	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
apr-util: Out-of-bounds access in corrupted SDBM databaseCVE-2017-12618	Red Hat Enterprise Linux 5/apr-util Red Hat Enterprise Linux 6/apr-util	Red Hat	Medium	No fix reported	Not recorded
httpd: Out of bounds access after failure in reading the HTTP requestCVE-2018-1301	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Weak Digest auth nonce generation in mod_auth_digestCVE-2018-1312	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: <FilesMatch> bypass with a trailing newline in the file nameCVE-2017-15715	Red Hat Enterprise Linux 6/httpd Red Hat JBoss Enterprise Web Server 2/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language valuesCVE-2017-15710	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Low	No fix reported	Not recorded
httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdirCVE-2016-4975	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Medium	No fix reported	Not recorded