Read the docs
Red Hat Security Advisory

RHSA-2019:1296

Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update

Released 2019-05-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2019-00184 CVE-2019-0211 · GHSA-w9rc-q752-88hf

Use after free in Apache HTTP Server

Priority CRITICAL 93KEV

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) cou…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.65005 Published 2019-04-08 Partial fix CWE-416
TI-2018-00680 CVE-2018-0732 · GHSA-497c-86pp-222m

Client DoS due to large DH parameter

Priority HIGH 69

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.4701 Published 2018-06-12 Partial fix CWE-320
TI-2018-00452 CVE-2018-0495 · GHSA-q2v2-pgm4-m8c8

Observable discrepancy in Libgcrypt before 1.7.10 and 1.8.x before 1.8.3

Priority LOW 23

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign functi…

CVSS 3.0MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00869 Published 2018-06-13 Partial fix CWE-203