Red Hat Security Advisory

RHSA-2011:1391

httpd security and bug fix update

Released 2011-10-20 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-9.el6_1.3, httpd-devel-2.2.15-9.el6_1.3, httpd-devel-2.2.15-9.el6_1.3.ppc +3

Fixes 2 records

TI-2011-02978 CVE-2011-3368 · GHSA-j85c-9w9v-p2p3

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through…

HIGH 66

The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for config…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.90734 Published 2011-10-05 Partial fix CWE-20

TI-2011-02958 CVE-2011-3348 · GHSA-vqqq-3xjq-cg84

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with…

MEDIUM 40

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.2238 Published 2011-09-19 Fixed CWE-400