Red Hat JBoss Enterprise Web Server 3/httpd

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)CVE-2017-6004	Red Hat Enterprise Linux 7/pcre Red Hat JBoss Enterprise Web Server 1/httpd	Red Hat	Medium	No fix reported	Not recorded
pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)CVE-2017-7186	Red Hat Enterprise Linux 7/pcre Red Hat JBoss Enterprise Web Server 1/httpd	Red Hat	Medium	No fix reported	Not recorded
pcre: stack-based buffer overflow write in pcre32_copy_substringCVE-2017-7246	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
pcre: stack-based buffer overflow write in pcre32_copy_substringCVE-2017-7245	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)CVE-2017-7244	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
httpd: mod_mime buffer overreadCVE-2017-7679	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 5/jbossas	Red Hat	Medium	No fix reported	Not recorded
httpd: mod_ssl NULL pointer dereferenceCVE-2017-3169	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 6/jbossas	Red Hat	Medium	No fix reported	Not recorded
httpd: ap_get_basic_auth_pw() authentication bypassCVE-2017-3167	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Application Platform 6/jbossas	Red Hat	Medium	No fix reported	Not recorded
pcre: OP_KETRMAX feature in the match function in pcre_exec.cCVE-2017-11164	Red Hat Enterprise Linux 5/pcre Red Hat Enterprise Linux 6/glib2	Red Hat	Low	No fix reported	Not recorded
httpd: Uninitialized memory reflection in mod_auth_digestCVE-2017-9788	Red Hat Enterprise Linux 5/httpd Red Hat JBoss Enterprise Web Server 3/httpd	Red Hat	High	No fix reported	Not recorded
apr-util: Out-of-bounds access in corrupted SDBM databaseCVE-2017-12618	Red Hat Enterprise Linux 5/apr-util Red Hat Enterprise Linux 6/apr-util	Red Hat	Medium	No fix reported	Not recorded
httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdirCVE-2016-4975	Red Hat Enterprise Linux 5/httpd Red Hat Enterprise Linux 6/httpd	Red Hat	Medium	No fix reported	Not recorded
HTTP/2: request for large response leads to denial of serviceCVE-2019-9517	Red Hat AMQ Broker 7/jetty Red Hat JBoss Enterprise Application Platform 7/undertow-core	Red Hat	High	No fix reported	Not recorded
HTTP/2: 0-length headers lead to denial of serviceCVE-2019-9516	Red Hat 3scale API Management Platform 2/nginx Red Hat AMQ Broker 7/jetty	Red Hat	High	No fix reported	Not recorded
HTTP/2: large amount of data requests leads to denial of serviceCVE-2019-9511	Red Hat 3scale API Management Platform 2/nginx Red Hat AMQ Broker 7/jetty	Red Hat	High	No fix reported	Not recorded