Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP1 Security Update

Fixed packages 108

Vulnerabilities 3

• Critical 9.8
  CVE-2019-5481

  Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.

  curl curl curl gnurl Debian Ubuntu Alpine
  Sep 16, 2019
• Critical 9.8
  CVE-2019-5482 EPSS 18%

  Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

  curl curl curl gnurl Debian Ubuntu Alpine
  Sep 16, 2019
• Unscored —
  CVE-2019-0220 EPSS 18%

  A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains mult…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jun 11, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#low
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1695036
• article
  https://issues.redhat.com/browse/JBCS-129
• article
  https://issues.redhat.com/browse/JBCS-343
• article
  https://issues.redhat.com/browse/JBCS-451
• article
  https://issues.redhat.com/browse/JBCS-632
• article
  https://issues.redhat.com/browse/JBCS-813
• article
  https://issues.redhat.com/browse/JBCS-847
• article
  https://issues.redhat.com/browse/JBCS-856
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0250.json
• report
  https://access.redhat.com/security/cve/CVE-2019-0220
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-0220
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-0220
• article
  http://www.apache.org/dist/httpd/CHANGES_2.4
• article
  https://httpd.apache.org/security/vulnerabilities_24.html
• report
  https://access.redhat.com/security/cve/CVE-2019-5481
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1749402
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5481
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5481
• article
  https://curl.haxx.se/docs/CVE-2019-5481.html
• report
  https://access.redhat.com/security/cve/CVE-2019-5482
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1749652
• advisory
  https://www.cve.org/CVERecord?id=CVE-2019-5482
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2019-5482
• article
  https://curl.haxx.se/docs/CVE-2019-5482.html