Red Hat Security Advisory

RHSA-2020:0250

Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP1 Security Update

Released 2020-01-27 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apr-1.6.3-73.jbcs.el6, jbcs-httpd24-apr-devel-1.6.3-73.jbcs.el6, jbcs-httpd24-apr-util-1.6.1-54.jbcs.el6 +38
Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr-1.6.3-73.jbcs.el7, jbcs-httpd24-apr-devel-1.6.3-73.jbcs.el7, jbcs-httpd24-apr-util-1.6.1-54.jbcs.el7 +38

TI-2019-03890 CVE-2019-5482 · GHSA-35cc-32cj-vr6g

HIGH 66

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17939 Published 2019-09-16 Partial fix CWE-122

TI-2019-03889 CVE-2019-5481 · GHSA-hr98-frg6-wvvr

MEDIUM 59

Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07465 Published 2019-09-16 Partial fix CWE-415

TI-2019-00193 CVE-2019-0220 · GHSA-mfx7-67r8-jcfr

MEDIUM 41

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.1786 Published 2019-06-11 Partial fix CWE-706