All products

Red Hat JBoss Enterprise Web Server 1/httpd

Red Hat · Package
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
httpd: SetEnvIf resource exhaustionCVE-2011-4415 Red Hat Directory Server 8/httpdRed Hat Enterprise Linux 4/httpd Red Hat Low No fix reported
httpd: insecure handling of LD_LIBRARY_PATH in envvarsCVE-2012-0883 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Low No fix reported
httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabledCVE-2012-2687 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Low No fix reported
httpd: mod_negotiation XSS via untrusted file names in directories with MultiViews enabledCVE-2008-0455 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Low No fix reported
httpd: XSS flaw in mod_proxy_balancer manager interfaceCVE-2012-4558 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Medium No fix reported
httpd: multiple XSS flaws due to unescaped hostnamesCVE-2012-3499 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Medium No fix reported
httpd: mod_rewrite allows terminal escape sequences to be written to the log fileCVE-2013-1862 Red Hat Enterprise Linux 4/httpdRed Hat JBoss Enterprise Web Server 1/httpd Red Hat Low No fix reported
httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_davCVE-2013-1896 Red Hat Enterprise Linux 4/httpdRed Hat JBoss Enterprise Web Server 1/httpd Red Hat Medium No fix reported
httpd: mod_dav denial of service via crafted DAV WRITE requestCVE-2013-6438 Red Hat Directory Server 8/httpdRed Hat JBoss Enterprise Application Platform 5/httpd Red Hat Medium No fix reported
httpd: bypass of mod_headers rules via chunked requestsCVE-2013-5704 Red Hat Directory Server 8/httpdRed Hat Enterprise Linux 5/httpd Red Hat Low No fix reported
httpd: mod_log_config does not properly handle logging certain cookies resulting in DoSCVE-2014-0098 Red Hat JBoss Enterprise Application Platform 5/httpdRed Hat JBoss Enterprise Web Server 1/httpd Red Hat Low No fix reported
httpd: mod_status heap-based buffer overflowCVE-2014-0226 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat High No fix reported
httpd: mod_deflate denial of serviceCVE-2014-0118 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Medium No fix reported
httpd: mod_cgid denial of serviceCVE-2014-0231 Red Hat JBoss Enterprise Web Server 1/httpd Red Hat Medium No fix reported
httpd: HTTP request smuggling attack against chunked request parserCVE-2015-3183 CloudForms Management Engine 5/httpdRed Hat Directory Server 8/httpd Red Hat Medium No fix reported
pcre: Integer overflow caused by missing check for certain conditions (8.38/31)CVE-2015-8394 Red Hat Directory Server 8/pcreRed Hat Enterprise Linux 5/pcre Red Hat Unknown No fix reported
pcre: Integer overflow in subroutine calls (8.38/8)CVE-2015-8387 Red Hat Directory Server 8/pcreRed Hat Enterprise Linux 5/pcre Red Hat Unknown No fix reported
pcre: Buffer overflow caused by lookbehind assertion (8.38/6)CVE-2015-8386 Red Hat Directory Server 8/pcreRed Hat Enterprise Linux 5/pcre Red Hat Low No fix reported
HTTPD: sets environmental variable based on user supplied Proxy request headerCVE-2016-5387 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Enterprise Web Server 1/httpd Red Hat High No fix reported
httpd: Apache HTTP Request Parsing Whitespace DefectsCVE-2016-8743 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported