Skip to content
OpenAdvisories
Unscored RHSA-2012:0128 5 CVEs

Red Hat Security Advisory: httpd security update

Published Sep 15, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client httpd 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::client httpd-debuginfo 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::client httpd-devel 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::client httpd-manual 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::client httpd-tools 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::client mod_ssl 1:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-debuginfo 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-devel 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-manual 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-tools 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::computenode mod_ssl 1:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server httpd 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server httpd-debuginfo 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server httpd-devel 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server httpd-manual 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server httpd-tools 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::server mod_ssl 1:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-debuginfo 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-devel 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-manual 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-tools 0:2.2.15-15.el6_2.1
Red Hat · RHEL 6 enterprise_linux:6::workstation mod_ssl 1:2.2.15-15.el6_2.1

Vulnerabilities 5

  • Unscored —
    CVE-2011-3607 Public exploit

    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…

    apache2 Debian
  • Unscored —
    CVE-2011-3639 Public exploit EPSS 50%

    The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 …

    apache2 Debian
  • Unscored —
    CVE-2011-4317 Public exploit EPSS 60%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, wh…

    apache2 Debian
  • Unscored —
    CVE-2012-0031 Public exploit

    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …

    apache2 Debian
  • Unscored —
    CVE-2012-0053 Public exploit EPSS 82%

    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2011-1391.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=752080
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=756483
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=769844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=773744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785069
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0128.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3607
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3607
  • report
    https://access.redhat.com/security/cve/CVE-2011-3639
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3639
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3639
  • report
    https://access.redhat.com/security/cve/CVE-2011-4317
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4317
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4317
  • article
    https://community.qualys.com/blogs/securitylabs/2011/11/23/apache-reverse-proxy-bypass-issue
  • report
    https://access.redhat.com/security/cve/CVE-2012-0031
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0031
  • report
    https://access.redhat.com/security/cve/CVE-2012-0053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0053