Skip to content
OpenAdvisories
Unscored RHSA-2012:0542 6 CVEs

Red Hat Security Advisory: httpd security and bug fix update

Published Sep 15, 2024 · Updated May 15, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 httpd 0:2.2.17-15.4.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 httpd-devel 0:2.2.17-15.4.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 httpd-manual 0:2.2.17-15.4.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el5 mod_ssl 1:2.2.17-15.4.ep5.el5
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 httpd 0:2.2.17-15.4.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 httpd-devel 0:2.2.17-15.4.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 httpd-manual 0:2.2.17-15.4.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 httpd-tools 0:2.2.17-15.4.ep5.el6
Red Hat · JBoss Web Server 1 jboss_enterprise_web_server:1::el6 mod_ssl 1:2.2.17-15.4.ep5.el6

Vulnerabilities 6

  • Unscored —
    CVE-2011-3348 EPSS 22%

    The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configur…

    apache2 Debian
  • Unscored —
    CVE-2011-3368 Public exploit EPSS 91%

    The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 doe…

    apache2 Debian
  • Unscored —
    CVE-2011-3607 Public exploit

    Integer overflow in the ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x t…

    apache2 Debian
  • Unscored —
    CVE-2012-0021 EPSS 30%

    The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.2…

    apache2 Debian
  • Unscored —
    CVE-2012-0031 Public exploit

    scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon …

    apache2 Debian
  • Unscored —
    CVE-2012-0053 Public exploit EPSS 82%

    protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construc…

    apache2 Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://rhn.redhat.com/errata/RHSA-2011-1329.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=736690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=740045
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=749071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=769844
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=773744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785065
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=785069
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0542.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3348
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3348
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3348
  • article
    http://httpd.apache.org/security/vulnerabilities_22.html#2.2.21
  • report
    https://access.redhat.com/security/cve/CVE-2011-3368
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3368
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3368
  • article
    http://www.contextis.com/research/blog/reverseproxybypass/
  • report
    https://access.redhat.com/security/cve/CVE-2011-3607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3607
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3607
  • report
    https://access.redhat.com/security/cve/CVE-2012-0021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0021
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0021
  • report
    https://access.redhat.com/security/cve/CVE-2012-0031
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0031
  • report
    https://access.redhat.com/security/cve/CVE-2012-0053
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0053
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0053