Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 security update

Fixed packages 74

Vulnerabilities 14

• Critical 9.8
  CVE-2023-25690 Public exploit EPSS 84%

  Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

  Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific patter…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Mar 7, 2023
• Critical 9.8
  CVE-2023-27533

  A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an att…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  Mar 30, 2023
• Critical 9.1
  CVE-2023-23914

  A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functiona…

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine
  Feb 23, 2023
• High 8.8
  CVE-2023-27534

  A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly r…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  Mar 30, 2023
• High 7.5
  CVE-2022-43551 EPSS 17%

  A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS…

  curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine Wolfi
  Dec 23, 2022
• High 7.5
  CVE-2022-4450 EPSS 29%

  Double free after calling PEM_read_bio_ex

  The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io
  Feb 8, 2023
• High 7.5
  CVE-2023-0215

  Use-after-free following BIO_new_NDEF

  The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications.…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io
  Feb 8, 2023
• High 7.4
  CVE-2023-0286 Public exploit EPSS 68%

  X.400 address type confusion in X.509 GeneralName

  There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io
  Feb 8, 2023
• Medium 6.5
  CVE-2023-23915

  A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functiona…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  Feb 23, 2023
• Medium 6.5
  CVE-2023-23916

  An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HT…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  Feb 23, 2023
• Medium 5.9
  CVE-2022-4304 Public exploit EPSS 24%

  Timing Oracle in RSA Decryption

  A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a …

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi crates.io
  Feb 8, 2023
• Medium 5.9
  CVE-2022-43552

  A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it support…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 9, 2023
• Unscored —
  CVE-2006-20001 Public exploit

  Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

  A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Jan 17, 2023
• Unscored —
  CVE-2022-25147

  Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

  Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

  Apache Software Foundation Apache Portable Runtime Utility (APR-util) apr-util apr-util Debian Ubuntu Azure Linux Alpine
  Jan 31, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2152639
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2152652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2161774
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164440
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164492
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2164494
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2167797
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2167813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2167815
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2169652
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2176209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179062
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2179069
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3354.json
• report
  https://access.redhat.com/security/cve/CVE-2006-20001
• advisory
  https://www.cve.org/CVERecord?id=CVE-2006-20001
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2006-20001
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2006-20001
• report
  https://access.redhat.com/security/cve/CVE-2022-4304
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4304
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4304
• article
  https://www.openssl.org/news/secadv/20230207.txt
• report
  https://access.redhat.com/security/cve/CVE-2022-4450
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-4450
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-4450
• report
  https://access.redhat.com/security/cve/CVE-2022-25147
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-25147
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-25147
• report
  https://access.redhat.com/security/cve/CVE-2022-43551
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-43551
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-43551
• article
  https://curl.se/docs/CVE-2022-43551.html
• report
  https://access.redhat.com/security/cve/CVE-2022-43552
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-43552
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-43552
• article
  https://curl.se/docs/CVE-2022-43552.html
• report
  https://access.redhat.com/security/cve/CVE-2023-0215