Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2016-8743 (GCVE-0-2016-8743)
Vulnerability from cvelistv5 – Published: 2017-07-27 21:00 – Updated: 2024-09-16 17:03
VLAI
EPSS
Summary
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
Severity
No CVSS data available.
CWE
- Request Smuggling, Response Splitting
Assigner
References
40 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Apache Software Foundation | Apache HTTP Server |
Affected:
2.2.0 to 2.2.31, 2.4.1 to 2.4.23
|
Date Public
2016-12-20 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T02:34:59.642Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.apple.com/HT208221"
},
{
"name": "DSA-3796",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"name": "RHSA-2017:1721",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"name": "1037508",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1037508"
},
{
"name": "RHSA-2017:1413",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"name": "RHSA-2017:1161",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"name": "RHSA-2017:1414",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"name": "95077",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/95077"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"name": "RHSA-2017:1415",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"name": "RHSA-2017:0906",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"name": "GLSA-201701-36",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [11/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888217 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073163 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888221 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073161 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Apache HTTP Server",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "2.2.0 to 2.2.31, 2.4.1 to 2.4.23"
}
]
}
],
"datePublic": "2016-12-20T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Request Smuggling, Response Splitting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-06-06T10:11:24.000Z",
"orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"shortName": "apache"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.apple.com/HT208221"
},
{
"name": "DSA-3796",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"name": "RHSA-2017:1721",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"name": "1037508",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1037508"
},
{
"name": "RHSA-2017:1413",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"name": "RHSA-2017:1161",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"name": "RHSA-2017:1414",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"name": "95077",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/95077"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"name": "RHSA-2017:1415",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"name": "RHSA-2017:0906",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"name": "GLSA-201701-36",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [11/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888217 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073163 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888221 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073161 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"DATE_PUBLIC": "2016-12-20T00:00:00",
"ID": "CVE-2016-8743",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache HTTP Server",
"version": {
"version_data": [
{
"version_value": "2.2.0 to 2.2.31, 2.4.1 to 2.4.23"
}
]
}
}
]
},
"vendor_name": "Apache Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Request Smuggling, Response Splitting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.apple.com/HT208221",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208221"
},
{
"name": "DSA-3796",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"name": "RHSA-2017:1721",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"name": "1037508",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037508"
},
{
"name": "RHSA-2017:1413",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"name": "RHSA-2017:1161",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"name": "https://www.tenable.com/security/tns-2017-04",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"name": "RHSA-2017:1414",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"name": "95077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/95077"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"name": "RHSA-2017:1415",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"name": "RHSA-2017:0906",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"name": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743",
"refsource": "CONFIRM",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"name": "GLSA-201701-36",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180423-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [11/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888217 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073163 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888221 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073161 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
"assignerShortName": "apache",
"cveId": "CVE-2016-8743",
"datePublished": "2017-07-27T21:00:00.000Z",
"dateReserved": "2016-10-18T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:03:31.158Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2016-8743",
"date": "2026-05-27",
"epss": "0.0978",
"percentile": "0.93065"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.2.0\", \"versionEndIncluding\": \"2.2.31\", \"matchCriteriaId\": \"E3E7037D-2C83-4F09-8DC6-4C51D447727A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.4.1\", \"versionEndIncluding\": \"2.4.23\", \"matchCriteriaId\": \"8805C987-A5BB-403B-BB9F-B745A2AE7865\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1FE996B1-6951-4F85-AA58-B99A379D2163\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*\", \"matchCriteriaId\": \"3FA5E22C-489B-4C5F-A5F3-C03F45CA8811\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"33C068A4-3780-4EAB-A937-6082DF847564\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"807C024A-F8E8-4B48-A349-4C68CD252CA1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F96E3779-F56A-45FF-BB3D-4980527D721E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"83737173-E12E-4641-BC49-0BD84A6B29D0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BBCD86A-E6C7-4444-9D74-F861084090F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"51EF4996-72F4-4FA4-814F-F5991E7A8318\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"98381E61-F082-4302-B51F-5648884F998B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D99A687E-EAE6-417E-A88E-D0082BC194CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B353CE99-D57C-465B-AAB0-73EF581127D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7431ABC1-9252-419E-8CC1-311B41360078\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"17F256A9-D3B9-4C72-B013-4EFD878BFEA8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2466282-51AB-478D-9FF4-FA524265ED2E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.\"}, {\"lang\": \"es\", \"value\": \"El servidor HTTP Apache, en todas las distribuciones anteriores a la 2.2.32 y la 2.4.25 era liberal en el espacio en blanco aceptado de peticiones y enviado en lineas y cabeceras de respuesta. La aceptaci\\u00f3n de estos comportamientos diferentes representaba un problema a nivel de seguridad cuando httpd participa en cualquier cadena de proxies o interact\\u00faa con servidores de aplicaciones backend, ya sea mediante mod_proxy o utilizando mecanismos CGI convencionales y puede dar lugar al tr\\u00e1fico de peticiones, divisi\\u00f3n de respuestas y contaminaci\\u00f3n de la cach\\u00e9.\"}]",
"id": "CVE-2016-8743",
"lastModified": "2024-11-21T02:59:58.500",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2017-07-27T21:29:00.287",
"references": "[{\"url\": \"http://rhn.redhat.com/errata/RHSA-2017-1415.html\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2017/dsa-3796\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95077\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037508\", \"source\": \"security@apache.org\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0906\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1161\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1413\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1414\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1721\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743\", \"source\": \"security@apache.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"security@apache.org\"}, {\"url\": \"https://security.gentoo.org/glsa/201701-36\", \"source\": \"security@apache.org\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180423-0001/\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/HT208221\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2017-04\", \"source\": \"security@apache.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2017-1415.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.debian.org/security/2017/dsa-3796\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/95077\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1037508\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0906\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1161\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1413\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1414\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:1721\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/201701-36\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20180423-0001/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://support.apple.com/HT208221\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.tenable.com/security/tns-2017-04\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "security@apache.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2016-8743\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2017-07-27T21:29:00.287\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.\"},{\"lang\":\"es\",\"value\":\"El servidor HTTP Apache, en todas las distribuciones anteriores a la 2.2.32 y la 2.4.25 era liberal en el espacio en blanco aceptado de peticiones y enviado en lineas y cabeceras de respuesta. La aceptaci\u00f3n de estos comportamientos diferentes representaba un problema a nivel de seguridad cuando httpd participa en cualquier cadena de proxies o interact\u00faa con servidores de aplicaciones backend, ya sea mediante mod_proxy o utilizando mecanismos CGI convencionales y puede dar lugar al tr\u00e1fico de peticiones, divisi\u00f3n de respuestas y contaminaci\u00f3n de la cach\u00e9.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndIncluding\":\"2.2.31\",\"matchCriteriaId\":\"E3E7037D-2C83-4F09-8DC6-4C51D447727A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.4.1\",\"versionEndIncluding\":\"2.4.23\",\"matchCriteriaId\":\"8805C987-A5BB-403B-BB9F-B745A2AE7865\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1FE996B1-6951-4F85-AA58-B99A379D2163\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*\",\"matchCriteriaId\":\"3FA5E22C-489B-4C5F-A5F3-C03F45CA8811\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"807C024A-F8E8-4B48-A349-4C68CD252CA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F96E3779-F56A-45FF-BB3D-4980527D721E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CF73560-2F5B-4723-A8A1-9AADBB3ADA00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83737173-E12E-4641-BC49-0BD84A6B29D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98381E61-F082-4302-B51F-5648884F998B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B353CE99-D57C-465B-AAB0-73EF581127D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7431ABC1-9252-419E-8CC1-311B41360078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"17F256A9-D3B9-4C72-B013-4EFD878BFEA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2466282-51AB-478D-9FF4-FA524265ED2E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-1415.html\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2017/dsa-3796\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95077\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037508\",\"source\":\"security@apache.org\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0906\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1161\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1413\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1414\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1721\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743\",\"source\":\"security@apache.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"security@apache.org\"},{\"url\":\"https://security.gentoo.org/glsa/201701-36\",\"source\":\"security@apache.org\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180423-0001/\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2017-04\",\"source\":\"security@apache.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2017-1415.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.debian.org/security/2017/dsa-3796\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/95077\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1037508\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0906\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1161\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1413\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1414\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:1721\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201701-36\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20180423-0001/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://support.apple.com/HT208221\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2017-04\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTFR-2018-AVI-026
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Juniper Networks | Junos OS | Junos OS versions 15.1X53 antérieures à 15.1X53-D232 sur QFX5200/5110 | ||
| Juniper Networks | Junos OS | Junos OS versions 17.1 antérieures à 17.1R2-S5, 17.1R3 et 17.1R3 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1 antérieures à 15.1F2-S17, 15.1F5-S8, 15.1F6-S8, 15.1R5-S7, 15.1R7 | ||
| Juniper Networks | Junos OS | Junos OS versions 16.1 antérieures à 16.1R6 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X53 antérieures à 15.1X53-D70, 15.1X53-D231 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.1 antérieures à 14.1R9 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 16.2 antérieures à 16.2R2, 16.2R2-S2, 16.2R3 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.2 antérieures à 14.2R8 | ||
| N/A | N/A | CTPView versions 7.1, 7.2 et 7.3. | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1 antérieures à 15.1F5-S8, 15.1F6-S8, 15.1R5-S6, 15.1R6-S3, 15.1R7, 15.1F6, 15.1R3 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1 antérieures à 15.1R6-S2, 15.1R7 | ||
| Juniper Networks | Junos OS | Junos OS versions 16.1 antérieures à 16.1R5-S1, 16.1R6 | ||
| Juniper Networks | Junos Space | Junos Space antérieures à 17.2R1 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1 antérieures à 15.1R5-S8, 15.1F6-S9, 15.1R6-S4, 15.1R7 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 16.2 antérieures à 16.2R3 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X49 versions 15.1X49-D100 et supérieures mais antérieures à 15.1X49-D121 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.1X53 antérieures à 14.1X53-D40 sur QFX, EX | ||
| Juniper Networks | Junos OS | Junos OS versions 14.2 antérieures à 14.2R8 sur MX series | ||
| Juniper Networks | Junos OS | Junos OS versions 12.1X46 antérieures à 12.1X46-D71 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X49 antérieures à 15.1X49-D110 sur SRX | ||
| N/A | N/A | ScreenOS toutes versions sans le dernier correctif de sécurité | ||
| Juniper Networks | Junos OS | Junos OS versions 16.1X65 antérieures à 16.1X65-D45 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.1 antérieures à 14.1R8-S5, 14.1R9 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3X48 antérieures à 12.3X48-D55 sur SRX | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1R5-S4, 15.1R5-S5 et 15.1R6 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.1X46 antérieures à 12.1X46-D71 sur SRX | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3 antérieures à 12.3R12-S7 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.1X53 antérieures à 14.1X53-D46, 14.1X53-D50 et 14.1X53-D107 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3R antérieures à 12.3R12-S7 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3X48 antérieures à 12.3X48-D55 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3R12 antérieures à 12.3R12-S7 | ||
| Juniper Networks | Junos OS | Junos OS versions 12.3X48 versions 12.3X48-D55 et supérieures mais antérieures à 12.3X48-D65 | ||
| Juniper Networks | Junos OS | Junos OS versions 17.2X75 antérieures à 17.2X75-D50 | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X53 antérieures à 15.1X53-D49, 15.1X53-D470 sur NFX | ||
| Juniper Networks | Junos OS | Junos OS versions 15.1X53 antérieures à 15.1X53-D65 sur QFX10K | ||
| Juniper Networks | Junos OS | Junos OS versions 16.1 antérieures à 16.1R3-S6, 16.1R4-S6 et 16.1R5 | ||
| ESET | Security | Security Director et Log Collector antérieures à 17.2R1 | ||
| Juniper Networks | Junos OS | Junos OS versions 14.2 antérieures à 14.2R7-S9, 14.2R8 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Junos OS versions 15.1X53 ant\u00e9rieures \u00e0 15.1X53-D232 sur QFX5200/5110",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 17.1 ant\u00e9rieures \u00e0 17.1R2-S5, 17.1R3 et 17.1R3 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1 ant\u00e9rieures \u00e0 15.1F2-S17, 15.1F5-S8, 15.1F6-S8, 15.1R5-S7, 15.1R7",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.1 ant\u00e9rieures \u00e0 16.1R6 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X53 ant\u00e9rieures \u00e0 15.1X53-D70, 15.1X53-D231",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.1 ant\u00e9rieures \u00e0 14.1R9 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.2 ant\u00e9rieures \u00e0 16.2R2, 16.2R2-S2, 16.2R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.2 ant\u00e9rieures \u00e0 14.2R8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "CTPView versions 7.1, 7.2 et 7.3.",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1 ant\u00e9rieures \u00e0 15.1F5-S8, 15.1F6-S8, 15.1R5-S6, 15.1R6-S3, 15.1R7, 15.1F6, 15.1R3",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1 ant\u00e9rieures \u00e0 15.1R6-S2, 15.1R7",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.1 ant\u00e9rieures \u00e0 16.1R5-S1, 16.1R6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space ant\u00e9rieures \u00e0 17.2R1",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1 ant\u00e9rieures \u00e0 15.1R5-S8, 15.1F6-S9, 15.1R6-S4, 15.1R7 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.2 ant\u00e9rieures \u00e0 16.2R3 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X49 versions 15.1X49-D100 et sup\u00e9rieures mais ant\u00e9rieures \u00e0 15.1X49-D121",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.1X53 ant\u00e9rieures \u00e0 14.1X53-D40 sur QFX, EX",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.2 ant\u00e9rieures \u00e0 14.2R8 sur MX series",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.1X46 ant\u00e9rieures \u00e0 12.1X46-D71",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X49 ant\u00e9rieures \u00e0 15.1X49-D110 sur SRX",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "ScreenOS toutes versions sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.1X65 ant\u00e9rieures \u00e0 16.1X65-D45",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.1 ant\u00e9rieures \u00e0 14.1R8-S5, 14.1R9",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3X48 ant\u00e9rieures \u00e0 12.3X48-D55 sur SRX",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1R5-S4, 15.1R5-S5 et 15.1R6",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.1X46 ant\u00e9rieures \u00e0 12.1X46-D71 sur SRX",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3 ant\u00e9rieures \u00e0 12.3R12-S7",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.1X53 ant\u00e9rieures \u00e0 14.1X53-D46, 14.1X53-D50 et 14.1X53-D107",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3R ant\u00e9rieures \u00e0 12.3R12-S7",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3X48 ant\u00e9rieures \u00e0 12.3X48-D55",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3R12 ant\u00e9rieures \u00e0 12.3R12-S7",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 12.3X48 versions 12.3X48-D55 et sup\u00e9rieures mais ant\u00e9rieures \u00e0 12.3X48-D65",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 17.2X75 ant\u00e9rieures \u00e0 17.2X75-D50",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X53 ant\u00e9rieures \u00e0 15.1X53-D49, 15.1X53-D470 sur NFX",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 15.1X53 ant\u00e9rieures \u00e0 15.1X53-D65 sur QFX10K",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions 16.1 ant\u00e9rieures \u00e0 16.1R3-S6, 16.1R4-S6 et 16.1R5",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Security Director et Log Collector ant\u00e9rieures \u00e0 17.2R1",
"product": {
"name": "Security",
"vendor": {
"name": "ESET",
"scada": false
}
}
},
{
"description": "Junos OS versions 14.2 ant\u00e9rieures \u00e0 14.2R7-S9, 14.2R8",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2017-3169",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3169"
},
{
"name": "CVE-2017-14106",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-14106"
},
{
"name": "CVE-2018-0002",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0002"
},
{
"name": "CVE-2015-5600",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5600"
},
{
"name": "CVE-2018-0008",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0008"
},
{
"name": "CVE-2015-6563",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6563"
},
{
"name": "CVE-2018-0013",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0013"
},
{
"name": "CVE-2015-6564",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-6564"
},
{
"name": "CVE-2015-7236",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7236"
},
{
"name": "CVE-2017-7668",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7668"
},
{
"name": "CVE-2017-9798",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9798"
},
{
"name": "CVE-2018-0011",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0011"
},
{
"name": "CVE-2016-2141",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2141"
},
{
"name": "CVE-2015-7501",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-7501"
},
{
"name": "CVE-2015-5304",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5304"
},
{
"name": "CVE-2018-0012",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0012"
},
{
"name": "CVE-2018-0003",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0003"
},
{
"name": "CVE-2017-9788",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-9788"
},
{
"name": "CVE-2015-5174",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5174"
},
{
"name": "CVE-2017-1000112",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000112"
},
{
"name": "CVE-2016-8858",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8858"
},
{
"name": "CVE-2017-5664",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5664"
},
{
"name": "CVE-2017-1000111",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-1000111"
},
{
"name": "CVE-2017-6074",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-6074"
},
{
"name": "CVE-2017-5645",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-5645"
},
{
"name": "CVE-2018-0010",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0010"
},
{
"name": "CVE-2018-0005",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0005"
},
{
"name": "CVE-2018-0007",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0007"
},
{
"name": "CVE-2016-8655",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8655"
},
{
"name": "CVE-2017-3167",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-3167"
},
{
"name": "CVE-2015-5188",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5188"
},
{
"name": "CVE-2018-0009",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0009"
},
{
"name": "CVE-2017-7679",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-7679"
},
{
"name": "CVE-2018-0004",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0004"
},
{
"name": "CVE-2018-0014",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0014"
},
{
"name": "CVE-2017-2634",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-2634"
},
{
"name": "CVE-2016-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8743"
},
{
"name": "CVE-2015-5220",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-5220"
},
{
"name": "CVE-2018-0006",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0006"
},
{
"name": "CVE-2018-0001",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-0001"
}
],
"links": [],
"reference": "CERTFR-2018-AVI-026",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2018-01-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10838 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10838\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10831 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10831\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10835 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10835\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10833 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10833\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10837 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10837\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10841 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10841\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10828 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10828\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10834 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10834\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10829 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10829\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10836 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10836\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10839 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10839\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10830 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10830\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10832 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10832\u0026cat=SIRT_1\u0026actp=LIST"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA10840 du 10 janvier 2018",
"url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10840\u0026cat=SIRT_1\u0026actp=LIST"
}
]
}
CERTFR-2023-AVI-0051
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Juniper. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| N/A | N/A | NorthStar Controller versions antérieures à 6.2.3 | ||
| Juniper Networks | N/A | Contrail Cloud versions antérieures à 13.7.0 | ||
| Juniper Networks | Junos OS Evolved | Junos OS Evolved versions antérieures à 19.2R3-EVO, 19.3R3-EVO, 19.4R3-EVO, 20.1R3-EVO, 20.2R2-EVO, 20.3R1-EVO, 20.4R2-EVO, 20.4R3-S3-EVO, 20.4R3-S4-EVO, 21.1R2-EVO, 21.2R1-EVO, 21.2R3-S4-EVO, 21.3R2-EVO, 21.3R3-EVO, 21.3R3-S1-EVO, 21.4R1-EVO, 21.4R2-EVO, 21.4R2-S1-EVO, 21.4R2-S2-EVO, 21.4R3-EVO, 22.1R1-EVO, 22.1R1-S2-EVO, 22.1R2-EVO, 22.1R3-EVO, 22.2R1-EVO, 22.2R1-S1-EVO, 22.2R2-EVO et 22.3R1-EVO | ||
| Juniper Networks | N/A | Juniper Networks Contrail Service Orchestration (CSO) versions antérieures à 6.3.0 | ||
| Juniper Networks | Junos OS | Junos OS versions antérieures à 15.1R7-S12, 18.4R2-S7, 19.1R3-S2, 19.1R3-S9, 19.2R1-S9, 19.2R3, 19.2R3-S5, 19.2R3-S6, 19.3R3, 19.3R3-S6, 19.3R3-S7, 19.4R2-S7, 19.4R2-S8, 19.4R3, 19.4R3-S10, 19.4R3-S8, 19.4R3-S9, 20.1R2, 20.1R3-S4, 20.2R2, 20.2R3-S5, 20.2R3-S6, 20.2R3-S7, 20.3R1, 20.3R3-S4, 20.3R3-S5, 20.3R3-S6, 20.4R1, 20.4R3-S3, 20.4R3-S4, 20.4R3-S5, 21.1R1-S1, 21.1R2, 21.1R3, 21.1R3-S3, 21.1R3-S4, 21.1R3-S5, 21.2R1, 21.2R3, 21.2R3-S1, 21.2R3-S2, 21.2R3-S3, 21.3R2, 21.3R3, 21.3R3-S1, 21.3R3-S2, 21.3R3-S3, 21.4R2, 21.4R2-S1, 21.4R2-S2, 21.4R3, 21.4R3-S1, 21.4R3-S2, 22.1R1, 22.1R1-S2, 22.1R2, 22.1R2-S1, 22.1R2-S2, 22.1R3, 22.1R3-S1, 22.2R1, 22.2R1-S1, 22.2R1-S2, 22.2R2, 22.2R3, 22.3R1, 22.3R1-S1, 22.3R2 et 22.4R1 | ||
| Juniper Networks | Junos Space | Junos Space versions antérieures à 22.3R1 | ||
| Juniper Networks | N/A | Cloud Native Contrail Networking versions antérieures à R22.3 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "NorthStar Controller versions ant\u00e9rieures \u00e0 6.2.3",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Contrail Cloud versions ant\u00e9rieures \u00e0 13.7.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS Evolved versions ant\u00e9rieures \u00e0 19.2R3-EVO, 19.3R3-EVO, 19.4R3-EVO, 20.1R3-EVO, 20.2R2-EVO, 20.3R1-EVO, 20.4R2-EVO, 20.4R3-S3-EVO, 20.4R3-S4-EVO, 21.1R2-EVO, 21.2R1-EVO, 21.2R3-S4-EVO, 21.3R2-EVO, 21.3R3-EVO, 21.3R3-S1-EVO, 21.4R1-EVO, 21.4R2-EVO, 21.4R2-S1-EVO, 21.4R2-S2-EVO, 21.4R3-EVO, 22.1R1-EVO, 22.1R1-S2-EVO, 22.1R2-EVO, 22.1R3-EVO, 22.2R1-EVO, 22.2R1-S1-EVO, 22.2R2-EVO et 22.3R1-EVO",
"product": {
"name": "Junos OS Evolved",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Juniper Networks Contrail Service Orchestration (CSO) versions ant\u00e9rieures \u00e0 6.3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos OS versions ant\u00e9rieures \u00e0 15.1R7-S12, 18.4R2-S7, 19.1R3-S2, 19.1R3-S9, 19.2R1-S9, 19.2R3, 19.2R3-S5, 19.2R3-S6, 19.3R3, 19.3R3-S6, 19.3R3-S7, 19.4R2-S7, 19.4R2-S8, 19.4R3, 19.4R3-S10, 19.4R3-S8, 19.4R3-S9, 20.1R2, 20.1R3-S4, 20.2R2, 20.2R3-S5, 20.2R3-S6, 20.2R3-S7, 20.3R1, 20.3R3-S4, 20.3R3-S5, 20.3R3-S6, 20.4R1, 20.4R3-S3, 20.4R3-S4, 20.4R3-S5, 21.1R1-S1, 21.1R2, 21.1R3, 21.1R3-S3, 21.1R3-S4, 21.1R3-S5, 21.2R1, 21.2R3, 21.2R3-S1, 21.2R3-S2, 21.2R3-S3, 21.3R2, 21.3R3, 21.3R3-S1, 21.3R3-S2, 21.3R3-S3, 21.4R2, 21.4R2-S1, 21.4R2-S2, 21.4R3, 21.4R3-S1, 21.4R3-S2, 22.1R1, 22.1R1-S2, 22.1R2, 22.1R2-S1, 22.1R2-S2, 22.1R3, 22.1R3-S1, 22.2R1, 22.2R1-S1, 22.2R1-S2, 22.2R2, 22.2R3, 22.3R1, 22.3R1-S1, 22.3R2 et 22.4R1",
"product": {
"name": "Junos OS",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Junos Space versions ant\u00e9rieures \u00e0 22.3R1",
"product": {
"name": "Junos Space",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
},
{
"description": "Cloud Native Contrail Networking versions ant\u00e9rieures \u00e0 R22.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Juniper Networks",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-40085",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40085"
},
{
"name": "CVE-2022-1473",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1473"
},
{
"name": "CVE-2020-14621",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14621"
},
{
"name": "CVE-2023-22403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22403"
},
{
"name": "CVE-2020-8696",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8696"
},
{
"name": "CVE-2020-14803",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14803"
},
{
"name": "CVE-2023-22393",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22393"
},
{
"name": "CVE-2022-21426",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21426"
},
{
"name": "CVE-2021-45960",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45960"
},
{
"name": "CVE-2023-22407",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22407"
},
{
"name": "CVE-2021-35586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35586"
},
{
"name": "CVE-2023-22394",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22394"
},
{
"name": "CVE-2020-8695",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8695"
},
{
"name": "CVE-2021-30465",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30465"
},
{
"name": "CVE-2021-35550",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35550"
},
{
"name": "CVE-2023-22404",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22404"
},
{
"name": "CVE-2020-14562",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14562"
},
{
"name": "CVE-2021-35567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35567"
},
{
"name": "CVE-2020-14579",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14579"
},
{
"name": "CVE-2021-33034",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33034"
},
{
"name": "CVE-2021-42574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42574"
},
{
"name": "CVE-2021-2163",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2163"
},
{
"name": "CVE-2023-22405",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22405"
},
{
"name": "CVE-2022-22823",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22823"
},
{
"name": "CVE-2021-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2161"
},
{
"name": "CVE-2021-2341",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2341"
},
{
"name": "CVE-2020-0466",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0466"
},
{
"name": "CVE-2021-26691",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-26691"
},
{
"name": "CVE-2021-27219",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27219"
},
{
"name": "CVE-2022-38178",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38178"
},
{
"name": "CVE-2023-22409",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22409"
},
{
"name": "CVE-2020-14593",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14593"
},
{
"name": "CVE-2021-2160",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2160"
},
{
"name": "CVE-2023-22416",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22416"
},
{
"name": "CVE-2020-14797",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14797"
},
{
"name": "CVE-2020-14798",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14798"
},
{
"name": "CVE-2021-29154",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29154"
},
{
"name": "CVE-2020-15778",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-15778"
},
{
"name": "CVE-2007-6755",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-6755"
},
{
"name": "CVE-2022-21299",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21299"
},
{
"name": "CVE-2022-38177",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38177"
},
{
"name": "CVE-2021-2180",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2180"
},
{
"name": "CVE-2020-14578",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14578"
},
{
"name": "CVE-2021-2385",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2385"
},
{
"name": "CVE-2020-26116",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-26116"
},
{
"name": "CVE-2022-21624",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21624"
},
{
"name": "CVE-2021-2194",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2194"
},
{
"name": "CVE-2022-21305",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21305"
},
{
"name": "CVE-2022-21166",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21166"
},
{
"name": "CVE-2020-14556",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14556"
},
{
"name": "CVE-2020-36385",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36385"
},
{
"name": "CVE-2020-14792",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14792"
},
{
"name": "CVE-2020-25704",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-25704"
},
{
"name": "CVE-2022-25315",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25315"
},
{
"name": "CVE-2022-22822",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22822"
},
{
"name": "CVE-2018-8046",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-8046"
},
{
"name": "CVE-2020-1971",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-1971"
},
{
"name": "CVE-2021-2202",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2202"
},
{
"name": "CVE-2023-22402",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22402"
},
{
"name": "CVE-2022-21626",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21626"
},
{
"name": "CVE-2021-3450",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3450"
},
{
"name": "CVE-2020-14781",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14781"
},
{
"name": "CVE-2021-2307",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2307"
},
{
"name": "CVE-2023-22400",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22400"
},
{
"name": "CVE-2021-27363",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27363"
},
{
"name": "CVE-2022-21366",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21366"
},
{
"name": "CVE-2022-0934",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0934"
},
{
"name": "CVE-2021-35559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35559"
},
{
"name": "CVE-2021-3573",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3573"
},
{
"name": "CVE-2022-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21291"
},
{
"name": "CVE-2021-39275",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-39275"
},
{
"name": "CVE-2021-27364",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27364"
},
{
"name": "CVE-2021-2146",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2146"
},
{
"name": "CVE-2021-35565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35565"
},
{
"name": "CVE-2021-2432",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2432"
},
{
"name": "CVE-2016-4658",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4658"
},
{
"name": "CVE-2021-2174",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2174"
},
{
"name": "CVE-2020-0549",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0549"
},
{
"name": "CVE-2021-35603",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35603"
},
{
"name": "CVE-2022-23852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-23852"
},
{
"name": "CVE-2022-2526",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2526"
},
{
"name": "CVE-2020-12364",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12364"
},
{
"name": "CVE-2022-22825",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22825"
},
{
"name": "CVE-2021-4083",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4083"
},
{
"name": "CVE-2023-22397",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22397"
},
{
"name": "CVE-2020-14796",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14796"
},
{
"name": "CVE-2022-21125",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21125"
},
{
"name": "CVE-2022-0330",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0330"
},
{
"name": "CVE-2019-1543",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1543"
},
{
"name": "CVE-2021-2389",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2389"
},
{
"name": "CVE-2020-8698",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8698"
},
{
"name": "CVE-2017-12613",
"url": "https://www.cve.org/CVERecord?id=CVE-2017-12613"
},
{
"name": "CVE-2021-27365",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27365"
},
{
"name": "CVE-2020-8648",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8648"
},
{
"name": "CVE-2022-21628",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21628"
},
{
"name": "CVE-2022-25235",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25235"
},
{
"name": "CVE-2020-27170",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27170"
},
{
"name": "CVE-2023-22399",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22399"
},
{
"name": "CVE-2021-2369",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2369"
},
{
"name": "CVE-2018-25032",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
},
{
"name": "CVE-2021-2390",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2390"
},
{
"name": "CVE-2021-2144",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2144"
},
{
"name": "CVE-2022-32250",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32250"
},
{
"name": "CVE-2021-2154",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2154"
},
{
"name": "CVE-2023-22398",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22398"
},
{
"name": "CVE-2021-46143",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-46143"
},
{
"name": "CVE-2021-23017",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23017"
},
{
"name": "CVE-2020-14581",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14581"
},
{
"name": "CVE-2020-12363",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12363"
},
{
"name": "CVE-2021-2162",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2162"
},
{
"name": "CVE-2021-2388",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2388"
},
{
"name": "CVE-2023-22401",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22401"
},
{
"name": "CVE-2022-22942",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22942"
},
{
"name": "CVE-2023-22396",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22396"
},
{
"name": "CVE-2021-2171",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2171"
},
{
"name": "CVE-2021-34798",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34798"
},
{
"name": "CVE-2020-24489",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-24489"
},
{
"name": "CVE-2023-22417",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22417"
},
{
"name": "CVE-2021-2178",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2178"
},
{
"name": "CVE-2020-14573",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14573"
},
{
"name": "CVE-2022-21365",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21365"
},
{
"name": "CVE-2020-24513",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-24513"
},
{
"name": "CVE-2022-21123",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21123"
},
{
"name": "CVE-2022-21283",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21283"
},
{
"name": "CVE-2022-21449",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21449"
},
{
"name": "CVE-2022-1271",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1271"
},
{
"name": "CVE-2021-22543",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22543"
},
{
"name": "CVE-2020-14782",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14782"
},
{
"name": "CVE-2020-35498",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-35498"
},
{
"name": "CVE-2023-22406",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22406"
},
{
"name": "CVE-2021-33909",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33909"
},
{
"name": "CVE-2020-27827",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-27827"
},
{
"name": "CVE-2023-22391",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22391"
},
{
"name": "CVE-2019-20934",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20934"
},
{
"name": "CVE-2021-28950",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-28950"
},
{
"name": "CVE-2021-29650",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29650"
},
{
"name": "CVE-2021-3715",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3715"
},
{
"name": "CVE-2020-36322",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36322"
},
{
"name": "CVE-2021-4155",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4155"
},
{
"name": "CVE-2022-21434",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21434"
},
{
"name": "CVE-2023-22412",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22412"
},
{
"name": "CVE-2021-3564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3564"
},
{
"name": "CVE-2021-3621",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3621"
},
{
"name": "CVE-2021-42739",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-42739"
},
{
"name": "CVE-2021-3156",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3156"
},
{
"name": "CVE-2022-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21294"
},
{
"name": "CVE-2021-3752",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3752"
},
{
"name": "CVE-2023-22415",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22415"
},
{
"name": "CVE-2022-29154",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-29154"
},
{
"name": "CVE-2020-14779",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14779"
},
{
"name": "CVE-2021-3177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3177"
},
{
"name": "CVE-2022-0492",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0492"
},
{
"name": "CVE-2022-22827",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22827"
},
{
"name": "CVE-2022-34169",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34169"
},
{
"name": "CVE-2007-2285",
"url": "https://www.cve.org/CVERecord?id=CVE-2007-2285"
},
{
"name": "CVE-2020-28196",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28196"
},
{
"name": "CVE-2020-12362",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12362"
},
{
"name": "CVE-2021-22555",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22555"
},
{
"name": "CVE-2022-21341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21341"
},
{
"name": "CVE-2021-3347",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3347"
},
{
"name": "CVE-2022-25236",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-25236"
},
{
"name": "CVE-2022-0778",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0778"
},
{
"name": "CVE-2021-37576",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37576"
},
{
"name": "CVE-2020-26137",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-26137"
},
{
"name": "CVE-2021-35578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35578"
},
{
"name": "CVE-2021-2226",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2226"
},
{
"name": "CVE-2023-22410",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22410"
},
{
"name": "CVE-2021-0920",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-0920"
},
{
"name": "CVE-2020-14583",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14583"
},
{
"name": "CVE-2023-22408",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22408"
},
{
"name": "CVE-2022-21340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21340"
},
{
"name": "CVE-2021-2342",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2342"
},
{
"name": "CVE-2022-22720",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22720"
},
{
"name": "CVE-2022-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21293"
},
{
"name": "CVE-2022-21549",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21549"
},
{
"name": "CVE-2020-14871",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14871"
},
{
"name": "CVE-2022-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21282"
},
{
"name": "CVE-2022-21349",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21349"
},
{
"name": "CVE-2021-3712",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3712"
},
{
"name": "CVE-2022-1729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-1729"
},
{
"name": "CVE-2021-2179",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2179"
},
{
"name": "CVE-2021-3504",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3504"
},
{
"name": "CVE-2021-2169",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2169"
},
{
"name": "CVE-2023-22414",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22414"
},
{
"name": "CVE-2022-21248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21248"
},
{
"name": "CVE-2023-22411",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22411"
},
{
"name": "CVE-2020-14145",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14145"
},
{
"name": "CVE-2022-21277",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21277"
},
{
"name": "CVE-2021-32399",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-32399"
},
{
"name": "CVE-2021-35564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35564"
},
{
"name": "CVE-2022-22826",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22826"
},
{
"name": "CVE-2021-23840",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23840"
},
{
"name": "CVE-2020-24512",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-24512"
},
{
"name": "CVE-2022-21496",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21496"
},
{
"name": "CVE-2020-11668",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11668"
},
{
"name": "CVE-2019-11287",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-11287"
},
{
"name": "CVE-2021-44790",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44790"
},
{
"name": "CVE-2021-35556",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35556"
},
{
"name": "CVE-2020-24511",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-24511"
},
{
"name": "CVE-2021-33033",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33033"
},
{
"name": "CVE-2021-4028",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4028"
},
{
"name": "CVE-2022-21443",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21443"
},
{
"name": "CVE-2021-3765",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3765"
},
{
"name": "CVE-2021-23841",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23841"
},
{
"name": "CVE-2021-40438",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40438"
},
{
"name": "CVE-2020-0543",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0543"
},
{
"name": "CVE-2021-4034",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4034"
},
{
"name": "CVE-2022-24903",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24903"
},
{
"name": "CVE-2022-22824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22824"
},
{
"name": "CVE-2019-1551",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-1551"
},
{
"name": "CVE-2016-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8743"
},
{
"name": "CVE-2021-2372",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2372"
},
{
"name": "CVE-2022-21619",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21619"
},
{
"name": "CVE-2021-25217",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25217"
},
{
"name": "CVE-2021-35561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35561"
},
{
"name": "CVE-2022-21476",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21476"
},
{
"name": "CVE-2020-0548",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0548"
},
{
"name": "CVE-2020-28469",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28469"
},
{
"name": "CVE-2022-21541",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21541"
},
{
"name": "CVE-2020-0465",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-0465"
},
{
"name": "CVE-2016-8625",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8625"
},
{
"name": "CVE-2021-2166",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-2166"
},
{
"name": "CVE-2022-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21360"
},
{
"name": "CVE-2022-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21296"
},
{
"name": "CVE-2022-21540",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-21540"
},
{
"name": "CVE-2023-22413",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22413"
},
{
"name": "CVE-2023-22395",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22395"
},
{
"name": "CVE-2021-35940",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-35940"
},
{
"name": "CVE-2020-14577",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14577"
}
],
"links": [],
"reference": "CERTFR-2023-AVI-0051",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-01-23T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nJuniper. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nun probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de\ncode arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Juniper",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70195 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-QFX10K-Series-PFE-crash-upon-receipt-of-specific-genuine-packets-when-sFlow-is-enabled-CVE-2023-22399?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70183 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Contrail-Cloud-Multiple-Vulnerabilities-have-been-resolved-in-Contrail-Cloud-release-13-7-0?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70203 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-An-RPD-crash-can-happen-due-to-an-MPLS-TE-tunnel-configuration-change-on-a-directly-connected-router-CVE-2023-22407?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70192 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Receipt-of-crafted-TCP-packets-on-Ethernet-console-port-results-in-MBUF-leak-leading-to-Denial-of-Service-DoS-CVE-2023-22396?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70213 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-A-memory-leak-might-be-observed-in-IPsec-VPN-scenario-leading-to-an-FPC-crash-CVE-2023-22417?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70193 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-PTX10003-An-attacker-sending-specific-genuine-packets-will-cause-a-memory-leak-in-the-PFE-leading-to-a-Denial-of-Service-CVE-2023-22397?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70181 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-RPD-might-crash-when-MPLS-ping-is-performed-on-BGP-LSPs-CVE-2023-22398?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70186 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-Multiple-vulnerabilities-resolved-in-OpenSSL?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70179 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Northstar-Controller-Pivotal-RabbitMQ-contains-a-web-management-plugin-that-is-vulnerable-to-a-Denial-of-Service-DoS-attack-CVE-2019-11287?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70208 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-MX-Series-and-SRX-Series-The-flowd-daemon-will-crash-if-the-SIP-ALG-is-enabled-and-specific-SIP-messages-are-processed-CVE-2023-22412?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70201 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-QFX5k-Series-EX46xx-Series-MAC-limiting-feature-stops-working-after-PFE-restart-device-reboot--CVE-2023-22405?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70209 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-MX-Series-FPC-crash-when-an-IPsec6-tunnel-processes-specific-IPv4-packets-CVE-2023-22413?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70187 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-ACX2K-Series-Receipt-of-a-high-rate-of-specific-traffic-will-lead-to-a-Denial-of-Service-DoS-CVE-2023-22391?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70199 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-QFX10k-Series-ICCP-flap-will-be-observed-due-to-excessive-specific-traffic-CVE-2023-22403?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70180 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-OpenSSL-Infinite-loop-in-BN-mod-sqrt-reachable-when-parsing-certificates-CVE-2022-0778?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70198 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-The-kernel-might-restart-in-a-BGP-scenario-where-bgp-auto-discovery-is-enabled-and-such-a-neighbor-flaps-CVE-2023-22402?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70196 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-Evolved-A-specific-SNMP-GET-operation-and-a-specific-CLI-commands-cause-resources-to-leak-and-eventually-the-evo-pfemand-process-will-crash-CVE-2023-22400?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70197 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-PTX10008-PTX10016-When-a-specific-SNMP-MIB-is-queried-the-FPC-will-crash-CVE-2023-22401?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70202 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-A-memory-leak-which-will-ultimately-lead-to-an-rpd-crash-will-be-observed-when-a-peer-interface-flaps-continuously-in-a-Segment-Routing-scenario-CVE-2023-22406?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70190 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-Memory-leak-due-to-receipt-of-specially-crafted-SIP-calls-CVE-2023-22394?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70191 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-In-an-MPLS-scenario-the-processing-of-specific-packets-to-the-device-causes-a-buffer-leak-and-ultimately-a-loss-of-connectivity-CVE-2023-22395?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA69903 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2022-10-Security-Bulletin-Contrail-Networking-Multiple-Vulnerabilities-have-been-resolved-in-Contrail-Networking-R22-3?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70204 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-5000-Series-Upon-processing-of-a-specific-SIP-packet-an-FPC-can-crash-CVE-2023-22408?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70200 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-and-MX-Series-with-SPC3-When-IPsec-VPN-is-configured-iked-will-core-when-a-specifically-formatted-payload-is-received-CVE-2023-22404?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70212 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-The-flowd-daemon-will-crash-if-SIP-ALG-is-enabled-and-a-malicious-SIP-packet-is-received-CVE-2023-22416?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70185 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-Space-Multiple-vulnerabilities-resolved-in-22-3R1-release?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70211 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-MX-Series-and-SRX-Series-The-flow-processing-daemon-flowd-will-crash-when-a-specific-H-323-packet-is-received-CVE-2023-22415?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70210 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-PTX-Series-and-QFX10000-Series-An-FPC-memory-leak-is-observed-when-specific-multicast-packets-are-processed-CVE-2023-22414?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70206 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-MX-Series-with-MPC10-MPC11-When-Suspicious-Control-Flow-Detection-scfd-is-enabled-and-an-attacker-is-sending-specific-traffic-this-causes-a-memory-leak-CVE-2023-22410?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70205 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-MX-Series-with-SPC3-When-an-inconsistent-NAT-configuration-exists-and-a-specific-CLI-command-is-issued-the-SPC-will-reboot-CVE-2023-22409?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70182 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Contrail-Service-Orchestration-Multiple-vulnerabilities-resolved-in-CSO-6-3-0?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70189 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-RPD-crash-upon-receipt-of-BGP-route-with-invalid-next-hop-CVE-2023-22393?language=en_US"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Juniper JSA70207 du 11 janvier 2023",
"url": "https://supportportal.juniper.net/s/article/2023-01-Security-Bulletin-Junos-OS-SRX-Series-The-flowd-daemon-will-crash-when-Unified-Policies-are-used-with-IPv6-and-certain-dynamic-applications-are-rejected-by-the-device-CVE-2023-22411?language=en_US"
}
]
}
CNVD-2016-13233
Vulnerability from cnvd - Published: 2016-12-28
VLAI
Title
Apache HTTP Server安全绕过漏洞（CNVD-2016-13233）
Description
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。
Apache httpd 2.4.25之前的版本中存在安全漏洞，该漏洞源于程序未能正确的解析HTTP头数据。远程攻击者可通过提交特制的URL伪造目标服务器内容，造成Web缓存中毒或实施跨站脚本攻击。
Severity
中
Patch Name
Apache HTTP Server安全绕过漏洞（CNVD-2016-13233）的补丁
Patch Description
Apache httpd是美国阿帕奇（Apache）软件基金会的一款专为现代操作系统开发和维护的开源HTTP服务器。
Apache httpd 2.4.25之前的版本中存在安全漏洞，该漏洞源于程序未能正确的解析HTTP头数据。远程攻击者可通过提交特制的URL伪造目标服务器内容，造成Web缓存中毒或实施跨站脚本攻击。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://httpd.apache.org/security/vulnerabilities_24.html
Reference
http://www.securityfocus.com/bid/95077
Impacted products
| Name | Apache HTTP Server <2.4.25 |
|---|
{
"bids": {
"bid": {
"bidNumber": "95077"
}
},
"cves": {
"cve": {
"cveNumber": "CVE-2016-8743"
}
},
"description": "Apache httpd\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u4e13\u4e3a\u73b0\u4ee3\u64cd\u4f5c\u7cfb\u7edf\u5f00\u53d1\u548c\u7ef4\u62a4\u7684\u5f00\u6e90HTTP\u670d\u52a1\u5668\u3002\r\n\r\nApache httpd 2.4.25\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790HTTP\u5934\u6570\u636e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63d0\u4ea4\u7279\u5236\u7684URL\u4f2a\u9020\u76ee\u6807\u670d\u52a1\u5668\u5185\u5bb9\uff0c\u9020\u6210Web\u7f13\u5b58\u4e2d\u6bd2\u6216\u5b9e\u65bd\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u3002",
"discovererName": "David Dennerline at IBM Security\u0027s X-Force Researchers as well as Regis Leroy",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://httpd.apache.org/security/vulnerabilities_24.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2016-13233",
"openTime": "2016-12-28",
"patchDescription": "Apache httpd\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u8f6f\u4ef6\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u4e13\u4e3a\u73b0\u4ee3\u64cd\u4f5c\u7cfb\u7edf\u5f00\u53d1\u548c\u7ef4\u62a4\u7684\u5f00\u6e90HTTP\u670d\u52a1\u5668\u3002\r\n\r\nApache httpd 2.4.25\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u89e3\u6790HTTP\u5934\u6570\u636e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u63d0\u4ea4\u7279\u5236\u7684URL\u4f2a\u9020\u76ee\u6807\u670d\u52a1\u5668\u5185\u5bb9\uff0c\u9020\u6210Web\u7f13\u5b58\u4e2d\u6bd2\u6216\u5b9e\u65bd\u8de8\u7ad9\u811a\u672c\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Apache HTTP Server\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2016-13233\uff09\u7684\u8865\u4e01",
"products": {
"product": "Apache HTTP Server \u003c2.4.25"
},
"referenceLink": "http://www.securityfocus.com/bid/95077",
"serverity": "\u4e2d",
"submitTime": "2016-12-26",
"title": "Apache HTTP Server\u5b89\u5168\u7ed5\u8fc7\u6f0f\u6d1e\uff08CNVD-2016-13233\uff09"
}
FKIE_CVE-2016-8743
Vulnerability from fkie_nvd - Published: 2017-07-27 21:29 - Updated: 2026-05-13 00:24
Severity
Summary
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
References
| URL | Tags | ||
|---|---|---|---|
| security@apache.org | http://rhn.redhat.com/errata/RHSA-2017-1415.html | Third Party Advisory | |
| security@apache.org | http://www.debian.org/security/2017/dsa-3796 | Third Party Advisory | |
| security@apache.org | http://www.securityfocus.com/bid/95077 | Third Party Advisory, VDB Entry | |
| security@apache.org | http://www.securitytracker.com/id/1037508 | Broken Link, Third Party Advisory, VDB Entry | |
| security@apache.org | https://access.redhat.com/errata/RHSA-2017:0906 | Third Party Advisory | |
| security@apache.org | https://access.redhat.com/errata/RHSA-2017:1161 | Third Party Advisory | |
| security@apache.org | https://access.redhat.com/errata/RHSA-2017:1413 | Third Party Advisory | |
| security@apache.org | https://access.redhat.com/errata/RHSA-2017:1414 | Third Party Advisory | |
| security@apache.org | https://access.redhat.com/errata/RHSA-2017:1721 | Third Party Advisory | |
| security@apache.org | https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us | Third Party Advisory | |
| security@apache.org | https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us | Third Party Advisory | |
| security@apache.org | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743 | Vendor Advisory | |
| security@apache.org | https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E | ||
| security@apache.org | https://security.gentoo.org/glsa/201701-36 | Patch, Third Party Advisory, VDB Entry | |
| security@apache.org | https://security.netapp.com/advisory/ntap-20180423-0001/ | Third Party Advisory | |
| security@apache.org | https://support.apple.com/HT208221 | Third Party Advisory | |
| security@apache.org | https://www.tenable.com/security/tns-2017-04 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2017-1415.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.debian.org/security/2017/dsa-3796 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/95077 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1037508 | Broken Link, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:0906 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1161 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1413 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1414 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://access.redhat.com/errata/RHSA-2017:1721 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03753en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03725en_us | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743 | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://security.gentoo.org/glsa/201701-36 | Patch, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20180423-0001/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.apple.com/HT208221 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://www.tenable.com/security/tns-2017-04 | Third Party Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| apache | http_server | * | |
| apache | http_server | * | |
| netapp | clustered_data_ontap | - | |
| netapp | oncommand_unified_manager | - | |
| debian | debian_linux | 8.0 | |
| debian | debian_linux | 9.0 | |
| redhat | enterprise_linux_desktop | 6.0 | |
| redhat | enterprise_linux_desktop | 7.0 | |
| redhat | enterprise_linux_eus | 7.3 | |
| redhat | enterprise_linux_eus | 7.4 | |
| redhat | enterprise_linux_eus | 7.5 | |
| redhat | enterprise_linux_eus | 7.6 | |
| redhat | enterprise_linux_eus | 7.7 | |
| redhat | enterprise_linux_server | 6.0 | |
| redhat | enterprise_linux_server | 7.0 | |
| redhat | enterprise_linux_server_aus | 7.3 | |
| redhat | enterprise_linux_server_aus | 7.4 | |
| redhat | enterprise_linux_server_aus | 7.6 | |
| redhat | enterprise_linux_server_aus | 7.7 | |
| redhat | enterprise_linux_server_tus | 7.3 | |
| redhat | enterprise_linux_server_tus | 7.6 | |
| redhat | enterprise_linux_server_tus | 7.7 | |
| redhat | enterprise_linux_workstation | 6.0 | |
| redhat | enterprise_linux_workstation | 7.0 | |
| redhat | jboss_core_services | 1.0 | |
| redhat | enterprise_linux | 6.0 | |
| redhat | enterprise_linux | 7.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E3E7037D-2C83-4F09-8DC6-4C51D447727A",
"versionEndIncluding": "2.2.31",
"versionStartIncluding": "2.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8805C987-A5BB-403B-BB9F-B745A2AE7865",
"versionEndIncluding": "2.4.23",
"versionStartIncluding": "2.4.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1FE996B1-6951-4F85-AA58-B99A379D2163",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
"matchCriteriaId": "3FA5E22C-489B-4C5F-A5F3-C03F45CA8811",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "33C068A4-3780-4EAB-A937-6082DF847564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "807C024A-F8E8-4B48-A349-4C68CD252CA1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "F96E3779-F56A-45FF-BB3D-4980527D721E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "0CF73560-2F5B-4723-A8A1-9AADBB3ADA00",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "5BF3C7A5-9117-42C7-BEA1-4AA378A582EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "83737173-E12E-4641-BC49-0BD84A6B29D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "9BBCD86A-E6C7-4444-9D74-F861084090F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "51EF4996-72F4-4FA4-814F-F5991E7A8318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "98381E61-F082-4302-B51F-5648884F998B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "D99A687E-EAE6-417E-A88E-D0082BC194CD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B353CE99-D57C-465B-AAB0-73EF581127D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "7431ABC1-9252-419E-8CC1-311B41360078",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "24C0F4E1-C52C-41E0-9F14-F83ADD5CC7ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "17F256A9-D3B9-4C72-B013-4EFD878BFEA8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E5ED5807-55B7-47C5-97A6-03233F4FBC3A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "825ECE2D-E232-46E0-A047-074B34DB1E97",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2466282-51AB-478D-9FF4-FA524265ED2E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution."
},
{
"lang": "es",
"value": "El servidor HTTP Apache, en todas las distribuciones anteriores a la 2.2.32 y la 2.4.25 era liberal en el espacio en blanco aceptado de peticiones y enviado en lineas y cabeceras de respuesta. La aceptaci\u00f3n de estos comportamientos diferentes representaba un problema a nivel de seguridad cuando httpd participa en cualquier cadena de proxies o interact\u00faa con servidores de aplicaciones backend, ya sea mediante mod_proxy o utilizando mecanismos CGI convencionales y puede dar lugar al tr\u00e1fico de peticiones, divisi\u00f3n de respuestas y contaminaci\u00f3n de la cach\u00e9."
}
],
"id": "CVE-2016-8743",
"lastModified": "2026-05-13T00:24:29.033",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-07-27T21:29:00.287",
"references": [
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/95077"
},
{
"source": "security@apache.org",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1037508"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"source": "security@apache.org",
"tags": [
"Vendor Advisory"
],
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "security@apache.org",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://support.apple.com/HT208221"
},
{
"source": "security@apache.org",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/95077"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1037508"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://support.apple.com/HT208221"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2017-04"
}
],
"sourceIdentifier": "security@apache.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-2RFH-2GH8-V9FQ
Vulnerability from github – Published: 2022-05-13 01:09 – Updated: 2025-04-20 03:41
VLAI
Details
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
Severity
7.5 (High)
{
"affected": [],
"aliases": [
"CVE-2016-8743"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2017-07-27T21:29:00Z",
"severity": "HIGH"
},
"details": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.",
"id": "GHSA-2rfh-2gh8-v9fq",
"modified": "2025-04-20T03:41:35Z",
"published": "2022-05-13T01:09:42Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20180423-0001"
},
{
"type": "WEB",
"url": "https://support.apple.com/HT208221"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"type": "WEB",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"type": "WEB",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890%40%3Ccvs.httpd.apache.org%3E"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/95077"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1037508"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"type": "CVSS_V3"
}
]
}
GSD-2016-8743
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2016-8743",
"description": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.",
"id": "GSD-2016-8743",
"references": [
"https://www.suse.com/security/cve/CVE-2016-8743.html",
"https://www.debian.org/security/2017/dsa-3796",
"https://access.redhat.com/errata/RHSA-2017:1721",
"https://access.redhat.com/errata/RHSA-2017:1415",
"https://access.redhat.com/errata/RHSA-2017:1414",
"https://access.redhat.com/errata/RHSA-2017:1413",
"https://access.redhat.com/errata/RHSA-2017:1161",
"https://access.redhat.com/errata/RHSA-2017:0906",
"https://ubuntu.com/security/CVE-2016-8743",
"https://advisories.mageia.org/CVE-2016-8743.html",
"https://alas.aws.amazon.com/cve/html/CVE-2016-8743.html",
"https://linux.oracle.com/cve/CVE-2016-8743.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2016-8743"
],
"details": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.",
"id": "GSD-2016-8743",
"modified": "2023-12-13T01:21:22.721896Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"DATE_PUBLIC": "2016-12-20T00:00:00",
"ID": "CVE-2016-8743",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Apache HTTP Server",
"version": {
"version_data": [
{
"version_value": "2.2.0 to 2.2.31, 2.4.1 to 2.4.23"
}
]
}
}
]
},
"vendor_name": "Apache Software Foundation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Request Smuggling, Response Splitting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://support.apple.com/HT208221",
"refsource": "CONFIRM",
"url": "https://support.apple.com/HT208221"
},
{
"name": "DSA-3796",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"name": "RHSA-2017:1721",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"name": "1037508",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1037508"
},
{
"name": "RHSA-2017:1413",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"name": "RHSA-2017:1161",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"name": "https://www.tenable.com/security/tns-2017-04",
"refsource": "CONFIRM",
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"name": "RHSA-2017:1414",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"name": "95077",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/95077"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us",
"refsource": "CONFIRM",
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"name": "RHSA-2017:1415",
"refsource": "REDHAT",
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"name": "RHSA-2017:0906",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"name": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743",
"refsource": "CONFIRM",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"name": "GLSA-201701-36",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180423-0001/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [11/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888217 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073163 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888221 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073161 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.4.23",
"versionStartIncluding": "2.4.1",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.2.31",
"versionStartIncluding": "2.2.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:netapp:oncommand_unified_manager:-:*:*:*:*:7-mode:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:redhat:jboss_core_services:1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "security@apache.org",
"ID": "CVE-2016-8743"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743",
"refsource": "CONFIRM",
"tags": [
"Vendor Advisory"
],
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-8743"
},
{
"name": "GLSA-201701-36",
"refsource": "GENTOO",
"tags": [
"Patch",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://security.gentoo.org/glsa/201701-36"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbux03725en_us"
},
{
"name": "1037508",
"refsource": "SECTRACK",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1037508"
},
{
"name": "95077",
"refsource": "BID",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/95077"
},
{
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbmu03753en_us"
},
{
"name": "https://www.tenable.com/security/tns-2017-04",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://www.tenable.com/security/tns-2017-04"
},
{
"name": "DSA-3796",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "http://www.debian.org/security/2017/dsa-3796"
},
{
"name": "https://support.apple.com/HT208221",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://support.apple.com/HT208221"
},
{
"name": "RHSA-2017:1721",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1721"
},
{
"name": "RHSA-2017:1414",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1414"
},
{
"name": "RHSA-2017:1413",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"name": "RHSA-2017:1161",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"name": "RHSA-2017:0906",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"name": "RHSA-2017:1415",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2017-1415.html"
},
{
"name": "https://security.netapp.com/advisory/ntap-20180423-0001/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20180423-0001/"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073149 [11/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r6521a7f62276340eabdb3339b2aa9a38c5f59d978497a1f794af53be@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073163 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r4fe84db67fe9dc906c6185e58bbd9913f4356dd555a5c3db490694e5@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888221 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r09b8a39d1262adbab5528eea73df1b1f93e919bf004ed5a843d9cad1@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1073161 - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2016-8743.json security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rfcb6c7b9e7ca727a7eeeb5f13f89488a03981cfa0e7c3125f18fa239@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210330 svn commit: r1888217 - /httpd/site/trunk/content/security/json/CVE-2016-8743.json",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r94284b139540e5287ebdd3450682d3e3d187263dd6b75af8fa7d4890@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/rad01d817195e6cc871cb1d73b207ca326379a20a6e7f30febaf56d24@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075467 [2/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r476d175be0aaf4a17680ef98c5153b4d336eaef76fb2224cc94c463a@%3Ccvs.httpd.apache.org%3E"
},
{
"name": "[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Vendor Advisory"
],
"url": "https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f@%3Ccvs.httpd.apache.org%3E"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-09-07T17:39Z",
"publishedDate": "2017-07-27T21:29Z"
}
}
}
JVNDB-2016-008607
Vulnerability from jvndb - Published: 2017-06-30 15:55 - Updated:2019-07-25 14:14
Severity
Summary
Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
Details
A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.
References
| Type | URL | |
|---|---|---|
Impacted products
| Vendor | Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-008607.html",
"dc:date": "2019-07-25T14:14+09:00",
"dcterms:issued": "2017-06-30T15:55+09:00",
"dcterms:modified": "2019-07-25T14:14+09:00",
"description": "A vulnerability (CVE-2016-8743) exists in Cosminexus HTTP Server and Hitachi Web Server.",
"link": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-008607.html",
"sec:cpe": [
{
"#text": "cpe:/a:apache:http_server",
"@product": "Apache HTTP Server",
"@vendor": "Apache Software Foundation",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:cosminexus_http_server",
"@product": "Cosminexus HTTP Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:hitachi_application_server",
"@product": "Hitachi Application Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:hitachi_application_server_for_developers",
"@product": "Hitachi Application Server for Developers",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:hitachi_web_server",
"@product": "Hitachi Web Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:it_operations_director",
"@product": "Hitachi IT Operations Director",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:job_management_partner_1%2Fit_desktop_management",
"@product": "Job Management Partner 1/IT Desktop Management",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:job_management_partner_1%2Fit_desktop_management-manager",
"@product": "Job Management Partner 1/IT Desktop Management - Manager",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:job_management_partner_1_integrated_management",
"@product": "Job Management Partner 1/Integrated Management",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:job_management_partner_1_performance_management_web_console",
"@product": "Job Management Partner 1/Performance Management - Web Console",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1%2fautomatic_operation",
"@product": "JP1/Automatic Operation",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1%2Fit_desktop_management-manager",
"@product": "JP1/IT Desktop Management - Manager",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1%2fperformance_management",
"@product": "JP1/Performance Management",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1_automatic_job_management_system_3",
"@product": "JP1/Automatic Job Management System 3",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1_integrated_management",
"@product": "JP1/Integrated Management",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1_it_desktop_management",
"@product": "JP1/IT Desktop Management",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1_operation_analytics",
"@product": "JP1/Operations Analytics",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:jp1_service_support",
"@product": "JP1/Service Support",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server",
"@product": "uCosminexus Application Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_enterprise",
"@product": "uCosminexus Application Server Enterprise",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_smart_edition",
"@product": "uCosminexus Application Server Smart Edition",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_application_server_standard",
"@product": "uCosminexus Application Server Standard",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer",
"@product": "uCosminexus Developer",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer_light",
"@product": "uCosminexus Developer Light",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_developer_standard",
"@product": "uCosminexus Developer Standard",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_primary_server",
"@product": "uCosminexus Primary Server",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_service_architect",
"@product": "uCosminexus Service Architect",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/a:hitachi:ucosminexus_service_platform",
"@product": "uCosminexus Service Platform",
"@vendor": "Hitachi, Ltd",
"@version": "2.2"
}
],
"sec:cvss": [
{
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
{
"@score": "4.0",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2016-008607",
"sec:references": [
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8743",
"@id": "CVE-2016-8743",
"@source": "CVE"
},
{
"#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4975",
"@id": "CVE-2016-4975",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743",
"@id": "CVE-2016-8743",
"@source": "NVD"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975",
"@id": "CVE-2016-4975",
"@source": "NVD"
},
{
"#text": "https://cwe.mitre.org/data/definitions/19.html",
"@id": "CWE-19",
"@title": "Data Handling(CWE-19)"
}
],
"title": "Vulnerability in Cosminexus HTTP Server and Hitachi Web Server"
}
RHSA-2017:0906
Vulnerability from csaf_redhat - Published: 2017-04-12 12:24 - Updated: 2026-05-14 22:23Summary
Red Hat Security Advisory: httpd security and bug fix update
Severity
Moderate
Notes
Topic: An update for httpd is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)
* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)
* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)
Note: The fix for the CVE-2016-8743 issue causes httpd to return "400 Bad Request" error to HTTP clients which do not strictly follow HTTP protocol specification. A newly introduced configuration directive "HttpProtocolOptions Unsafe" can be used to re-enable the old less strict parsing. However, such setting also re-introduces the CVE-2016-8743 issue.
Bug Fix(es):
* When waking up child processes during a graceful restart, the httpd parent process could attempt to open more connections than necessary if a large number of child processes had been active prior to the restart. Consequently, a graceful restart could take a long time to complete. With this update, httpd has been fixed to limit the number of connections opened during a graceful restart to the number of active children, and the described problem no longer occurs. (BZ#1420002)
* Previously, httpd running in a container returned the 500 HTTP status code (Internal Server Error) when a connection to a WebSocket server was closed. As a consequence, the httpd server failed to deliver the correct HTTP status and data to a client. With this update, httpd correctly handles all proxied requests to the WebSocket server, and the described problem no longer occurs. (BZ#1429947)
* In a configuration using LDAP authentication with the mod_authnz_ldap module, the name set using the AuthLDAPBindDN directive was not correctly used to bind to the LDAP server for all queries. Consequently, authorization attempts failed. The LDAP modules have been fixed to ensure the configured name is correctly bound for LDAP queries, and authorization using LDAP no longer fails. (BZ#1420047)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.
5.4 (Medium)
Affected products
Fixed
252 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.
7.5 (High)
Affected products
Fixed
252 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use mod_userdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data.
CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')Affected products
Fixed
252 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.
4.0 (Medium)
Affected products
Fixed
252 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
29 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2017:0906 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1420002 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1420047 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1429947 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2016-0736 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-0736 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-0736 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://www.redteam-pentesting.de/advisories/rt-s… | external |
| https://access.redhat.com/security/cve/CVE-2016-2161 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-2161 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-2161 | external |
| https://access.redhat.com/security/cve/CVE-2016-4975 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1375968 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-4975 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-4975 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://access.redhat.com/security/cve/CVE-2016-8743 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8743 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8743 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for httpd is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)\n\n* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)\n\n* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)\n\nNote: The fix for the CVE-2016-8743 issue causes httpd to return \"400 Bad Request\" error to HTTP clients which do not strictly follow HTTP protocol specification. A newly introduced configuration directive \"HttpProtocolOptions Unsafe\" can be used to re-enable the old less strict parsing. However, such setting also re-introduces the CVE-2016-8743 issue.\n\nBug Fix(es):\n\n* When waking up child processes during a graceful restart, the httpd parent process could attempt to open more connections than necessary if a large number of child processes had been active prior to the restart. Consequently, a graceful restart could take a long time to complete. With this update, httpd has been fixed to limit the number of connections opened during a graceful restart to the number of active children, and the described problem no longer occurs. (BZ#1420002)\n\n* Previously, httpd running in a container returned the 500 HTTP status code (Internal Server Error) when a connection to a WebSocket server was closed. As a consequence, the httpd server failed to deliver the correct HTTP status and data to a client. With this update, httpd correctly handles all proxied requests to the WebSocket server, and the described problem no longer occurs. (BZ#1429947)\n\n* In a configuration using LDAP authentication with the mod_authnz_ldap module, the name set using the AuthLDAPBindDN directive was not correctly used to bind to the LDAP server for all queries. Consequently, authorization attempts failed. The LDAP modules have been fixed to ensure the configured name is correctly bound for LDAP queries, and authorization using LDAP no longer fails. (BZ#1420047)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:0906",
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "1420002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420002"
},
{
"category": "external",
"summary": "1420047",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1420047"
},
{
"category": "external",
"summary": "1429947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1429947"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0906.json"
}
],
"title": "Red Hat Security Advisory: httpd security and bug fix update",
"tracking": {
"current_release_date": "2026-05-14T22:23:28+00:00",
"generator": {
"date": "2026-05-14T22:23:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2017:0906",
"initial_release_date": "2017-04-12T12:24:45+00:00",
"revision_history": [
{
"date": "2017-04-12T12:24:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-04-12T12:24:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:23:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::computenode"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product": {
"name": "Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"product_id": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.4.6-45.el7_3.4?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ldap@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"product_id": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_session@2.4.6-45.el7_3.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"product": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"product_id": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_proxy_html@2.4.6-45.el7_3.4?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"product": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"product_id": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-manual@2.4.6-45.el7_3.4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.src",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.src",
"product_id": "httpd-0:2.4.6-45.el7_3.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"product_id": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"product_id": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.4.6-45.el7_3.4?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"product_id": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x",
"product_id": "httpd-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"product_id": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"product_id": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ldap@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"product_id": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_session@2.4.6-45.el7_3.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"product": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"product_id": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_proxy_html@2.4.6-45.el7_3.4?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"product_id": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.4.6-45.el7_3.4?arch=ppc64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ldap@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"product_id": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_session@2.4.6-45.el7_3.4?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"product": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"product_id": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_proxy_html@2.4.6-45.el7_3.4?arch=ppc64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"product_id": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.4.6-45.el7_3.4?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ldap@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"product_id": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_session@2.4.6-45.el7_3.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"product": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"product_id": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_proxy_html@2.4.6-45.el7_3.4?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"product_id": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ssl@2.4.6-45.el7_3.4?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-tools@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd-devel@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_ldap@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"product_id": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_session@2.4.6-45.el7_3.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"product": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"product_id": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mod_proxy_html@2.4.6-45.el7_3.4?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)",
"product_id": "7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Client-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)",
"product_id": "7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7ComputeNode-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
"product_id": "7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Server-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.src",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-manual-0:2.4.6-45.el7_3.4.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch"
},
"product_reference": "httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_session-0:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_session-0:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)",
"product_id": "7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
},
"product_reference": "mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"relates_to_product_reference": "7Workstation-optional-7.3.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0736",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406744"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Padding Oracle in Apache mod_session_crypto",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0736"
},
{
"category": "external",
"summary": "RHBZ#1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0736",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
},
{
"category": "external",
"summary": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt",
"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-12T12:24:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Padding Oracle in Apache mod_session_crypto"
},
{
"cve": "CVE-2016-2161",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406753"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: DoS vulnerability in mod_auth_digest",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2161"
},
{
"category": "external",
"summary": "RHBZ#1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-12T12:24:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: DoS vulnerability in mod_auth_digest"
},
{
"cve": "CVE-2016-4975",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"discovery_date": "2016-09-12T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1375968"
}
],
"notes": [
{
"category": "description",
"text": "It was found that Apache was vulnerable to a HTTP response splitting attack for sites which use mod_userdir. An attacker could use this flaw to inject CRLF characters into the HTTP header and could possibly gain access to secure data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-4975"
},
{
"category": "external",
"summary": "RHBZ#1375968",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1375968"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-4975",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-4975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_22.html#CVE-2016-4975"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2016-4975"
}
],
"release_date": "2018-08-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-12T12:24:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir"
},
{
"cve": "CVE-2016-8743",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406822"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Request Parsing Whitespace Defects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8743"
},
{
"category": "external",
"summary": "RHBZ#1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8743"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-12T12:24:45+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:0906"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Client-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Client-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7ComputeNode-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7ComputeNode-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Server-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Server-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.src",
"7Workstation-optional-7.3.Z:httpd-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-debuginfo-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-devel-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:httpd-manual-0:2.4.6-45.el7_3.4.noarch",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:httpd-tools-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ldap-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_proxy_html-1:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_session-0:2.4.6-45.el7_3.4.x86_64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.aarch64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.ppc64le",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.s390x",
"7Workstation-optional-7.3.Z:mod_ssl-1:2.4.6-45.el7_3.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Request Parsing Whitespace Defects"
}
]
}
RHSA-2017:1161
Vulnerability from csaf_redhat - Published: 2017-04-26 10:19 - Updated: 2026-05-14 22:23Summary
Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update
Severity
Moderate
Notes
Topic: Updated httpd24 packages are now available as a part of Red Hat Software Collections 2.4 for Red Hat Enterprise Linux.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module.
The httpd24 Software Collection has been upgraded to version 2.4.25, which provides a number of bug fixes and enhancements over the previous version. For detailed changes, see the Red Hat Software Collections 2.4 Release Notes linked from the References section. (BZ#1404778)
Security Fix(es):
* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)
* A denial of service flaw was found in httpd's mod_http2 module. A remote attacker could use this flaw to block server threads for long times, causing starvation of worker threads, by manipulating the flow control windows on streams. (CVE-2016-1546)
* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)
* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)
Note: The fix for the CVE-2016-8743 issue causes httpd to return "400 Bad Request" error to HTTP clients which do not strictly follow HTTP protocol specification. A newly introduced configuration directive "HttpProtocolOptions Unsafe" can be used to re-enable the old less strict parsing. However, such setting also re-introduces the CVE-2016-8743 issue.
* A vulnerability was found in httpd's handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash. (CVE-2016-8740)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.
5.4 (Medium)
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in httpd's mod_http2 module. A remote attacker could use this flaw to block server threads for long times, causing starvation of worker threads, by manipulating the flow control windows on streams.
4.3 ()
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.
7.5 (High)
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in httpd's handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash.
5.9 (Medium)
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.
4.0 (Medium)
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the mod_remoteip module shipped with the httpd package. This flaw allows an attacker to spoof the IP address, resulting in the bypass of a mod_rewrite rule. The highest threat from this vulnerability is to integrity.
5.3 (Medium)
Affected products
Fixed
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
44 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2017:1161 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://access.redhat.com/documentation/en-US/Red… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1329639 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1335616 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1336350 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1401528 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1414037 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1432249 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1433474 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2016-0736 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-0736 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-0736 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://www.redteam-pentesting.de/advisories/rt-s… | external |
| https://access.redhat.com/security/cve/CVE-2016-1546 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1336350 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-1546 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-1546 | external |
| http://httpd.apache.org/security/vulnerabilities_… | external |
| https://access.redhat.com/security/cve/CVE-2016-2161 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-2161 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-2161 | external |
| https://access.redhat.com/security/cve/CVE-2016-8740 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1401528 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8740 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8740 | external |
| http://seclists.org/bugtraq/2016/Dec/3 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://access.redhat.com/security/cve/CVE-2016-8743 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8743 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8743 | external |
| https://access.redhat.com/security/cve/CVE-2020-11985 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1866559 | external |
| https://www.cve.org/CVERecord?id=CVE-2020-11985 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2020-11985 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
Acknowledgments
the Apache project
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated httpd24 packages are now available as a part of Red Hat Software Collections 2.4 for Red Hat Enterprise Linux.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The Apache HTTP Server is a powerful, efficient, and extensible web server. The httpd24 packages provide a recent stable release of version 2.4 of the Apache HTTP Server, along with the mod_auth_kerb module.\n\nThe httpd24 Software Collection has been upgraded to version 2.4.25, which provides a number of bug fixes and enhancements over the previous version. For detailed changes, see the Red Hat Software Collections 2.4 Release Notes linked from the References section. (BZ#1404778)\n\nSecurity Fix(es):\n\n* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)\n\n* A denial of service flaw was found in httpd\u0027s mod_http2 module. A remote attacker could use this flaw to block server threads for long times, causing starvation of worker threads, by manipulating the flow control windows on streams. (CVE-2016-1546)\n\n* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)\n\n* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)\n\nNote: The fix for the CVE-2016-8743 issue causes httpd to return \"400 Bad Request\" error to HTTP clients which do not strictly follow HTTP protocol specification. A newly introduced configuration directive \"HttpProtocolOptions Unsafe\" can be used to re-enable the old less strict parsing. However, such setting also re-introduces the CVE-2016-8743 issue.\n\n* A vulnerability was found in httpd\u0027s handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server\u0027s available memory, causing httpd to crash. (CVE-2016-8740)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1161",
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-US/Red_Hat_Software_Collections/2/html/2.4_Release_Notes/chap-RHSCL.html#sect-RHSCL-Changes-httpd",
"url": "https://access.redhat.com/documentation/en-US/Red_Hat_Software_Collections/2/html/2.4_Release_Notes/chap-RHSCL.html#sect-RHSCL-Changes-httpd"
},
{
"category": "external",
"summary": "1329639",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1329639"
},
{
"category": "external",
"summary": "1335616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335616"
},
{
"category": "external",
"summary": "1336350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336350"
},
{
"category": "external",
"summary": "1401528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1401528"
},
{
"category": "external",
"summary": "1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "1414037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1414037"
},
{
"category": "external",
"summary": "1432249",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1432249"
},
{
"category": "external",
"summary": "1433474",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1433474"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1161.json"
}
],
"title": "Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-05-14T22:23:28+00:00",
"generator": {
"date": "2026-05-14T22:23:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2017:1161",
"initial_release_date": "2017-04-26T10:19:21+00:00",
"revision_history": [
{
"date": "2017-04-26T10:19:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-04-26T10:19:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:23:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product": {
"name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:2::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"product": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"product_id": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.25-9.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"product": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"product_id": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.25-9.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"product_id": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.25-9.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"product_id": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.25-9.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"product": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"product_id": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.25-9.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"product_id": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.25-9.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.25-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.25-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"product_id": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.25-9.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.25-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.25-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.25-9.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"product": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"product_id": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.25-9.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.25-9.el6.src",
"product": {
"name": "httpd24-httpd-0:2.4.25-9.el6.src",
"product_id": "httpd24-httpd-0:2.4.25-9.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.25-9.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.25-9.el7.src",
"product": {
"name": "httpd24-httpd-0:2.4.25-9.el7.src",
"product_id": "httpd24-httpd-0:2.4.25-9.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.25-9.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)",
"product_id": "6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4-6.7.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.src",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)",
"product_id": "7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4-7.3.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.src",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-2.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0736",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406744"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Padding Oracle in Apache mod_session_crypto",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0736"
},
{
"category": "external",
"summary": "RHBZ#1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0736",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
},
{
"category": "external",
"summary": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt",
"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Padding Oracle in Apache mod_session_crypto"
},
{
"cve": "CVE-2016-1546",
"discovery_date": "2016-05-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1336350"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in httpd\u0027s mod_http2 module. A remote attacker could use this flaw to block server threads for long times, causing starvation of worker threads, by manipulating the flow control windows on streams.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: mod_http2 denial-of-service by thread starvation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-1546"
},
{
"category": "external",
"summary": "RHBZ#1336350",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1336350"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-1546",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-1546"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-1546",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1546"
},
{
"category": "external",
"summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
"url": "http://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2016-04-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: mod_http2 denial-of-service by thread starvation"
},
{
"cve": "CVE-2016-2161",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406753"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: DoS vulnerability in mod_auth_digest",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2161"
},
{
"category": "external",
"summary": "RHBZ#1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: DoS vulnerability in mod_auth_digest"
},
{
"cve": "CVE-2016-8740",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1401528"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in httpd\u0027s handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server\u0027s available memory, causing httpd to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Incomplete handling of LimitRequestFields directive in mod_http2",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this issue as having Low security\nimpact. This issue is not currently planned to be addressed in future\nupdates. For additional information, refer to the Issue Severity\nClassification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8740"
},
{
"category": "external",
"summary": "RHBZ#1401528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1401528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8740",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8740"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Dec/3",
"url": "http://seclists.org/bugtraq/2016/Dec/3"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2016-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
},
{
"category": "workaround",
"details": "As a temporary workaround - HTTP/2 can be disabled by changing\nthe configuration by removing h2 and h2c from the Protocols\nline(s) in the configuration file. \n\nThe resulting line should read:\n\n\t\tProtocols http/1.1",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: Incomplete handling of LimitRequestFields directive in mod_http2"
},
{
"cve": "CVE-2016-8743",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406822"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Request Parsing Whitespace Defects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8743"
},
{
"category": "external",
"summary": "RHBZ#1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8743"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Request Parsing Whitespace Defects"
},
{
"acknowledgments": [
{
"names": [
"the Apache project"
]
}
],
"cve": "CVE-2020-11985",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2020-08-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1866559"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the mod_remoteip module shipped with the httpd package. This flaw allows an attacker to spoof the IP address, resulting in the bypass of a mod_rewrite rule. The highest threat from this vulnerability is to integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue only affects httpd-2.4.x, therefore, httpd packages shipped with Red Hat Enterprise Linux 6 are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11985"
},
{
"category": "external",
"summary": "RHBZ#1866559",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1866559"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11985",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11985"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11985",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11985"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-11985",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-11985"
}
],
"release_date": "2020-08-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-04-26T10:19:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1161"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4-6.7.Z:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4-6.7.Z:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.src",
"6Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el6.noarch",
"6Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el6.x86_64",
"6Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el6.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4-7.3.Z:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4-7.3.Z:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Server-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Server-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Server-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.src",
"7Workstation-RHSCL-2.4:httpd24-httpd-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-debuginfo-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-devel-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-httpd-manual-0:2.4.25-9.el7.noarch",
"7Workstation-RHSCL-2.4:httpd24-httpd-tools-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ldap-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_proxy_html-1:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_session-0:2.4.25-9.el7.x86_64",
"7Workstation-RHSCL-2.4:httpd24-mod_ssl-1:2.4.25-9.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: IP address spoofing when proxying using mod_remoteip and mod_rewrite"
}
]
}
RHSA-2017:1413
Vulnerability from csaf_redhat - Published: 2017-06-07 17:54 - Updated: 2026-05-14 22:23Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Service Pack 1 for RHEL 7
Severity
Important
Notes
Topic: An update is now available for Red Hat JBoss Core Services on RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release of Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Service Pack 1 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)
* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)
* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)
* A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys. (CVE-2016-7056)
* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients. (CVE-2016-8610)
* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)
* A vulnerability was found in httpd's handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash. (CVE-2016-8740)
Red Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user's browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.
5.4 (Medium)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.
7.5 (High)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.
7.5 (High)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys.
5.5 (Medium)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
7.5 (High)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in httpd's handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server's available memory, causing httpd to crash.
5.9 (Medium)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Low
It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.
4.0 (Medium)
Affected products
Fixed
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
46 references
| URL | Category |
|---|---|
| https://access.redhat.com/errata/RHSA-2017:1413 | self |
| https://access.redhat.com/security/updates/classi… | external |
| https://access.redhat.com/documentation/en/red-ha… | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1377600 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1384743 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1401528 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://bugzilla.redhat.com/show_bug.cgi?id=1412120 | external |
| https://issues.redhat.com/browse/JBCS-319 | external |
| https://security.access.redhat.com/data/csaf/v2/a… | self |
| https://access.redhat.com/security/cve/CVE-2016-0736 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406744 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-0736 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-0736 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://www.redteam-pentesting.de/advisories/rt-s… | external |
| https://access.redhat.com/security/cve/CVE-2016-2161 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406753 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-2161 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-2161 | external |
| https://access.redhat.com/security/cve/CVE-2016-6304 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1377600 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-6304 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-6304 | external |
| https://www.openssl.org/news/secadv/20160922.txt | external |
| https://access.redhat.com/security/cve/CVE-2016-7056 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1412120 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-7056 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-7056 | external |
| https://access.redhat.com/security/cve/CVE-2016-8610 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1384743 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8610 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8610 | external |
| http://security.360.cn/cve/CVE-2016-8610 | external |
| https://access.redhat.com/security/cve/CVE-2016-8740 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1401528 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8740 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8740 | external |
| http://seclists.org/bugtraq/2016/Dec/3 | external |
| https://httpd.apache.org/security/vulnerabilities… | external |
| https://access.redhat.com/security/cve/CVE-2016-8743 | self |
| https://bugzilla.redhat.com/show_bug.cgi?id=1406822 | external |
| https://www.cve.org/CVERecord?id=CVE-2016-8743 | external |
| https://nvd.nist.gov/vuln/detail/CVE-2016-8743 | external |
Acknowledgments
the OpenSSL project
Gear Team of Qihoo 360 Inc.
Shi Lei
Gear Team of Qihoo 360 Inc.
Shi Lei
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat JBoss Core Services on RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Service Pack 1 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.23, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support. (CVE-2016-6304)\n\n* It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack. (CVE-2016-0736)\n\n* It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication. (CVE-2016-2161)\n\n* A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys. (CVE-2016-7056)\n\n* A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients. (CVE-2016-8610)\n\n* It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning. (CVE-2016-8743)\n\n* A vulnerability was found in httpd\u0027s handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server\u0027s available memory, causing httpd to crash. (CVE-2016-8740)\n\nRed Hat would like to thank the OpenSSL project for reporting CVE-2016-6304 and Shi Lei (Gear Team of Qihoo 360 Inc.) for reporting CVE-2016-8610. Upstream acknowledges Shi Lei (Gear Team of Qihoo 360 Inc.) as the original reporter of CVE-2016-6304.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2017:1413",
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en/red-hat-jboss-core-services/",
"url": "https://access.redhat.com/documentation/en/red-hat-jboss-core-services/"
},
{
"category": "external",
"summary": "1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "external",
"summary": "1401528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1401528"
},
{
"category": "external",
"summary": "1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "1412120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1412120"
},
{
"category": "external",
"summary": "JBCS-319",
"url": "https://issues.redhat.com/browse/JBCS-319"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1413.json"
}
],
"title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.23 Service Pack 1 for RHEL 7",
"tracking": {
"current_release_date": "2026-05-14T22:23:31+00:00",
"generator": {
"date": "2026-05-14T22:23:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.8.0"
}
},
"id": "RHSA-2017:1413",
"initial_release_date": "2017-06-07T17:54:35+00:00",
"revision_history": [
{
"date": "2017-06-07T17:54:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2017-06-07T17:54:35+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-14T22:23:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product": {
"name": "Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.0.2h-13.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-19.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.1-19.GA.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-libs@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.23-120.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.23-120.jbcs.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"product": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"product_id": "jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.23-120.jbcs.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product_id": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.0.2h-13.jbcs.el7?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"product_id": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.1-19.GA.jbcs.el7?arch=src"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"product": {
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"product_id": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.23-120.jbcs.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"product": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"product_id": "jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.23-120.jbcs.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch"
},
"product_reference": "jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
"product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
},
"product_reference": "jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64",
"relates_to_product_reference": "7Server-JBCS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-0736",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406744"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_session_crypto module of httpd did not use any mechanisms to verify integrity of the encrypted session data stored in the user\u0027s browser. A remote attacker could use this flaw to decrypt and modify session data using a padding oracle attack.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Padding Oracle in Apache mod_session_crypto",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-0736"
},
{
"category": "external",
"summary": "RHBZ#1406744",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406744"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-0736",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-0736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-0736"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
},
{
"category": "external",
"summary": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt",
"url": "https://www.redteam-pentesting.de/advisories/rt-sa-2016-001.txt"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Padding Oracle in Apache mod_session_crypto"
},
{
"cve": "CVE-2016-2161",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406753"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the mod_auth_digest module of httpd did not properly check for memory allocation failures. A remote attacker could use this flaw to cause httpd child processes to repeatedly crash if the server used HTTP digest authentication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: DoS vulnerability in mod_auth_digest",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2161"
},
{
"category": "external",
"summary": "RHBZ#1406753",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406753"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2161",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2161"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2161"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: DoS vulnerability in mod_auth_digest"
},
{
"acknowledgments": [
{
"names": [
"the OpenSSL project"
]
},
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc.",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2016-6304",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2016-09-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1377600"
}
],
"notes": [
{
"category": "description",
"text": "A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly, exit unexpectedly after exhausting all available memory, if it enabled OCSP stapling support.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OCSP Status Request extension unbounded memory growth",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "TLS server applications using OpenSSL versions in Red Hat Enterprise Linux 6 and 7 are only affected if they enable OCSP stapling support. Applications not enabling OCSP stapling support are not affected. Few applications implement OCSP stapling support and typically do not enable it by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-6304"
},
{
"category": "external",
"summary": "RHBZ#1377600",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1377600"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-6304",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-6304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6304"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20160922.txt",
"url": "https://www.openssl.org/news/secadv/20160922.txt"
}
],
"release_date": "2016-09-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: OCSP Status Request extension unbounded memory growth"
},
{
"cve": "CVE-2016-7056",
"cwe": {
"id": "CWE-385",
"name": "Covert Timing Channel"
},
"discovery_date": "2017-01-10T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1412120"
}
],
"notes": [
{
"category": "description",
"text": "A timing attack flaw was found in OpenSSL that could allow a malicious user with local access to recover ECDSA P-256 private keys.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: ECDSA P-256 timing attack key recovery",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In order to exploit this flaw, the attacker needs to be have local (shell) access to the machine where the message is being signed using the ECDSA algorithm with a P-256 elliptic curve key. Then using cache timing attacks (which needs precise timing), on multiple signature runs, the private key could be obtained. Based on the factor that exploitation is difficult, Red Hat Product Security Team has rated this flaw as having Moderate impact. A further security release may address this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-7056"
},
{
"category": "external",
"summary": "RHBZ#1412120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1412120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-7056",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-7056"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-7056",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-7056"
}
],
"release_date": "2017-01-10T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: ECDSA P-256 timing attack key recovery"
},
{
"acknowledgments": [
{
"names": [
"Shi Lei"
],
"organization": "Gear Team of Qihoo 360 Inc."
}
],
"cve": "CVE-2016-8610",
"discovery_date": "2016-10-14T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1384743"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw was found in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects applications that are compiled against OpenSSL or GnuTLS and do not allocate an extra thread for processing ClientHello messages. Nginx is affected by this issue; Apache httpd is not affected by this issue. This issue has been rated as having a security impact of Moderate. It requires an attacker to send a very large amount of SSL ALERT messages to the host network connection. This issue can also be mitigated by configuring firewalls to limit the number of connections per IP address, or use deep packet inspection to reject these type of alert packets. A future update may address this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8610"
},
{
"category": "external",
"summary": "RHBZ#1384743",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1384743"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8610",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8610"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8610"
},
{
"category": "external",
"summary": "http://security.360.cn/cve/CVE-2016-8610",
"url": "http://security.360.cn/cve/CVE-2016-8610"
}
],
"release_date": "2016-10-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS"
},
{
"cve": "CVE-2016-8740",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2016-12-05T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1401528"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in httpd\u0027s handling of the LimitRequestFields directive in mod_http2, affecting servers with HTTP/2 enabled. An attacker could send crafted requests with headers larger than the server\u0027s available memory, causing httpd to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Incomplete handling of LimitRequestFields directive in mod_http2",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this issue as having Low security\nimpact. This issue is not currently planned to be addressed in future\nupdates. For additional information, refer to the Issue Severity\nClassification: https://access.redhat.com/security/updates/classification/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8740"
},
{
"category": "external",
"summary": "RHBZ#1401528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1401528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8740",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8740"
},
{
"category": "external",
"summary": "http://seclists.org/bugtraq/2016/Dec/3",
"url": "http://seclists.org/bugtraq/2016/Dec/3"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html"
}
],
"release_date": "2016-12-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
},
{
"category": "workaround",
"details": "As a temporary workaround - HTTP/2 can be disabled by changing\nthe configuration by removing h2 and h2c from the Protocols\nline(s) in the configuration file. \n\nThe resulting line should read:\n\n\t\tProtocols http/1.1",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: Incomplete handling of LimitRequestFields directive in mod_http2"
},
{
"cve": "CVE-2016-8743",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"discovery_date": "2016-12-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1406822"
}
],
"notes": [
{
"category": "description",
"text": "It was discovered that the HTTP parser in httpd incorrectly allowed certain characters not permitted by the HTTP protocol specification to appear unencoded in HTTP request headers. If httpd was used in conjunction with a proxy or backend server that interpreted those characters differently, a remote attacker could possibly use this flaw to inject data into HTTP responses, resulting in proxy cache poisoning.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: Apache HTTP Request Parsing Whitespace Defects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-8743"
},
{
"category": "external",
"summary": "RHBZ#1406822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1406822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-8743",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-8743"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8743"
},
{
"category": "external",
"summary": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25",
"url": "https://httpd.apache.org/security/vulnerabilities_24.html#2.4.25"
}
],
"release_date": "2016-12-20T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2017-06-07T17:54:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted. After installing the updated packages, the httpd daemon will be restarted automatically.",
"product_ids": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2017:1413"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.0"
},
"products": [
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-httpd-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-libs-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.23-120.jbcs.el7.noarch",
"7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.1-19.GA.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.23-120.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.src",
"7Server-JBCS:jbcs-httpd24-openssl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.0.2h-13.jbcs.el7.x86_64",
"7Server-JBCS:jbcs-httpd24-openssl-static-1:1.0.2h-13.jbcs.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "httpd: Apache HTTP Request Parsing Whitespace Defects"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…