Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update

Fixed packages 32

Vulnerabilities 11

• High 8.8
  CVE-2023-38545 Public exploit EPSS 78%

  This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h…

  curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 18, 2023
• High 7.5
  CVE-2023-0464 Public exploit

  Excessive Resource Usage Verifying X.509 Policy Constraints

  A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 22, 2023
• High 7.5
  CVE-2023-38039 Public exploit EPSS 56%

  When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl…

  curl curl mysql curl Debian Ubuntu Azure Linux Alpine
  Sep 15, 2023
• High 7.5
  CVE-2023-41081

  Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request

  Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possibl…

  Apache Software Foundation Apache Tomcat Connectors libapache-mod-jk libapache-mod-jk Debian Ubuntu
  Sep 13, 2023
• Medium 6.5
  CVE-2023-2650 EPSS 75%

  Possible DoS translating ASN.1 object identifiers

  Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJ_obj2txt() directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with …

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  May 30, 2023
• Medium 5.3
  CVE-2023-0465

  Invalid certificate policies in leaf certificates are silently ignored

  Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate pol…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 28, 2023
• Medium 5.3
  CVE-2023-0466

  Certificate policy check not enabled

  The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However the implementation of the function does not enable the check which allows certificates with invalid or in…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine
  Mar 28, 2023
• Medium 5.3
  CVE-2023-3446

  Excessive time spent checking DH keys and parameters

  Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 19, 2023
• Medium 5.3
  CVE-2023-3817

  Excessive time spent checking DH q parameter value

  Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the k…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 31, 2023
• Unscored —
  CVE-2023-38546

  This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of …

  curl curl curl curl Debian Ubuntu Azure Linux Alpine Wolfi
  Oct 18, 2023
• Unscored —
  CVE-2023-45802 Public exploit

  Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

  When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping t…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Oct 23, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2181082
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182561
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2182565
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2207947
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2224962
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2227852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238847
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2239135
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241933
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2241938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243877
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7625.json
• report
  https://access.redhat.com/security/cve/CVE-2023-0464
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0464
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0464
• article
  https://www.openssl.org/news/secadv/20230322.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-0465
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0465
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0465
• article
  https://www.openssl.org/news/secadv/20230328.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-0466
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-0466
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-0466
• report
  https://access.redhat.com/security/cve/CVE-2023-2650
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-2650
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-2650
• article
  https://www.openssl.org/news/secadv/20230530.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-3446
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3446
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3446
• article
  https://www.openssl.org/news/secadv/20230719.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-3817
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-3817
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-3817
• article
  https://www.openssl.org/news/secadv/20230731.txt
• report
  https://access.redhat.com/security/cve/CVE-2023-38039
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-38039
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-38039