TI-2020-09644 CVE-2020-11984 · GHSA-7fcg-7xhc-3997
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
Priority CRITICAL 85
Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
RHSA-2020:4384
Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 security update
Released 2020-10-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Core Services on RHEL 6 Server jbcs-httpd24-apr-1.6.3-104.jbcs.el6, jbcs-httpd24-apr-devel-1.6.3-104.jbcs.el6, jbcs-httpd24-apr-util-1.6.1-75.jbcs.el6 +38
- Red Hat JBoss Core Services on RHEL 7 Server jbcs-httpd24-apr-1.6.3-104.jbcs.el7, jbcs-httpd24-apr-devel-1.6.3-104.jbcs.el7, jbcs-httpd24-apr-util-1.6.1-75.jbcs.el7 +39
Fixes 5 records
TI-2020-09652 CVE-2020-11993 · GHSA-89mq-r3q6-9q3q
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2…
Priority HIGH 66
Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory…
TI-2019-01188 CVE-2019-1551 · GHSA-fcc6-m5v9-xcgq
rsaz_512_sqr overflow bug on x86_64
Priority MEDIUM 45
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli.
TI-2019-03844 CVE-2019-5435 · GHSA-fp2w-w5rc-8fxj
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
Priority LOW 26
An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.
TI-2020-15696 CVE-2020-25680 · GHSA-h32x-w4cv-wrq9
Improper certificate validation in JBCS httpd
Priority LOW 24
A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'.