THREATIST.IORead the docs Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Release on RHEL 6
Released 2017-01-25 · Red Hat rating Important · View on Red Hat →
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafte…
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspec…
Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
Apache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input Validation in the protocol parsing logic in the load balancer resulting in a Segmentation Fault in the serving httpd process.
The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timin…