Red Hat Security Advisory

RHSA-2016:0062

Red Hat JBoss Web Server 2.1.0 security update

Released 2016-01-21 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 2.1

Fixes 3 records

TI-2015-02814 CVE-2015-3183 · GHSA-892q-vvcr-v6j5

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does…

MEDIUM 61

The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a crafted request, rel…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.74387 Published 2015-07-20 Partial fix CWE-17

TI-2013-04858 CVE-2013-5704 · GHSA-gwg2-5774-jpjm

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass…

MEDIUM 57

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.57992 Published 2014-04-15 Partial fix

TI-2012-00811 CVE-2012-0876 · GHSA-q8w9-7fww-v592

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without…

LOW 29

The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0566 Published 2012-07-03 Partial fix CWE-400