Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update

Fixed packages 32

Vulnerabilities 3

• High 7.8
  CVE-2019-0211 Exploited Public exploit EPSS 65%

  In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

  KEV Nov 3, 2021
• Unscored —
  CVE-2018-0495

  Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can b…

  openssl openssl1.0 nss libgcrypt20 Debian Ubuntu Alpine
  Jun 13, 2018
• Unscored —
  CVE-2018-0732 EPSS 47%

  Client DoS due to large DH parameter

  During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a …

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  Jun 12, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1591100
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1591163
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1694980
• article
  https://issues.redhat.com/browse/JBCS-620
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1297.json
• report
  https://access.redhat.com/security/cve/CVE-2018-0495
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0495
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0495
• article
  https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/
• report
  https://access.redhat.com/security/cve/CVE-2018-0732
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0732
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0732
• article
  https://www.openssl.org/news/secadv/20180612.txt
• report
  https://access.redhat.com/security/cve/CVE-2019-0211
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0211
• article
  http://www.apache.org/dist/httpd/CHANGES_2.4
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-0211
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog