Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Security Release on RHEL 6

Fixed packages 51

Vulnerabilities 12

• High 7.5
  CVE-2019-9511 Public exploit EPSS 60%

  Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manip…

  nodejs nodejs nodejs nginx Debian Ubuntu Alpine
  Aug 13, 2019
• High 7.5
  CVE-2019-9513 Public exploit EPSS 82%

  Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority…

  nodejs nodejs nodejs nginx Debian Ubuntu Alpine
  Aug 13, 2019
• High 7.5
  CVE-2019-9516 EPSS 57%

  Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. S…

  nodejs nginx nginx nginx Debian Ubuntu Alpine
  Aug 13, 2019
• High 7.5
  CVE-2019-9517 EPSS 27%

  Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

  Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer…

  apache2 apache2 nodejs apache2 Debian Ubuntu Alpine
  Aug 13, 2019
• Unscored —
  CVE-2018-0734 EPSS 12%

  Timing attack against DSA

  The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affec…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  Oct 30, 2018
• Unscored —
  CVE-2018-0737 EPSS 12%

  Cache timing vulnerability in RSA Key Generation

  The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in Open…

  OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine
  Apr 16, 2018
• Unscored —
  CVE-2018-17189 EPSS 19%

  In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the …

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jan 30, 2019
• Unscored —
  CVE-2018-17199 EPSS 20%

  In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the sess…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jan 30, 2019
• Unscored —
  CVE-2018-5407 Public exploit

  Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…

  openssl openssl openssl openssl1.0 Debian Ubuntu Alpine
  Nov 15, 2018
• Unscored —
  CVE-2019-0196 EPSS 19%

  A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handli…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 11, 2019
• Unscored —
  CVE-2019-0197

  A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 11, 2019
• Unscored —
  CVE-2019-0217 Public exploit EPSS 16%

  In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 8, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1568253
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1644364
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1645695
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668493
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668497
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1695020
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1695030
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1695042
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1735741
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741860
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741864
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1741868
• article
  https://issues.redhat.com/browse/JBCS-798
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3932.json
• report
  https://access.redhat.com/security/cve/CVE-2018-0734
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0734
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0734
• report
  https://access.redhat.com/security/cve/CVE-2018-0737
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-0737
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-0737
• article
  http://www.openwall.com/lists/oss-security/2018/04/16/3
• article
  https://www.openssl.org/news/secadv/20180416.txt
• report
  https://access.redhat.com/security/cve/CVE-2018-5407
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-5407
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-5407
• article
  https://github.com/bbbrumley/portsmash
• article
  https://www.openssl.org/news/secadv/20181112.txt
• report
  https://access.redhat.com/security/cve/CVE-2018-17189
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17189
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17189
• report
  https://access.redhat.com/security/cve/CVE-2018-17199
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-17199
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-17199
• report
  https://access.redhat.com/security/cve/CVE-2019-0196
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0196
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0196
• article
  http://www.apache.org/dist/httpd/CHANGES_2.4
• article
  https://httpd.apache.org/security/vulnerabilities_24.html