Skip to content
OpenAdvisories
Unscored RHSA-2013:0512 3 CVEs

Red Hat Security Advisory: httpd security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Aug 5, 2026

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client httpd 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::client httpd-debuginfo 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::client httpd-devel 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::client httpd-manual 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::client httpd-tools 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::client mod_ssl 1:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-debuginfo 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-devel 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-manual 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode httpd-tools 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode mod_ssl 1:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server httpd 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server httpd-debuginfo 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server httpd-devel 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server httpd-manual 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server httpd-tools 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::server mod_ssl 1:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-debuginfo 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-devel 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-manual 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation httpd-tools 0:2.2.15-26.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation mod_ssl 1:2.2.15-26.el6

Vulnerabilities 3

  • Unscored —
    CVE-2008-0455 Public exploit EPSS 65%

    Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in t…

  • Unscored —
    CVE-2012-2687 EPSS 23%

    Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_n…

  • Unscored —
    CVE-2012-4557 EPSS 17%

    The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon …

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/httpd.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=757735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=757739
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=805720
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=805810
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=828896
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=829689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=842376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=848954
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=850794
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=867745
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=868283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=871685
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876923
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0512.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0455
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0455
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0455
  • report
    https://access.redhat.com/security/cve/CVE-2012-2687
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2687
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2687
  • report
    https://access.redhat.com/security/cve/CVE-2012-4557
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4557
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4557