rhsa-2014_1972
Vulnerability from csaf_redhat
Published
2014-12-09 18:07
Modified
2024-09-13 09:21
Summary
Red Hat Security Advisory: httpd24-httpd security and bug fix update
Notes
Topic
Updated httpd24-httpd packages that fix two security issues and one bug
are now available for Red Hat Software Collections 1.
Red Hat Product Security has rated this update as having Low security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.
Details
The httpd packages provide the Apache HTTP Server, a powerful, efficient,
and extensible web server.
A NULL pointer dereference flaw was found in the way the mod_cache httpd
module handled Content-Type headers. A malicious HTTP server could cause
the httpd child process to crash when the Apache HTTP server was configured
to proxy to a server with caching enabled. (CVE-2014-3581)
A flaw was found in the way httpd handled HTTP Trailer headers when
processing requests using chunked encoding. A malicious client could use
Trailer headers to set additional HTTP headers after header processing was
performed by other modules. This could, for example, lead to a bypass of
header restrictions defined with mod_headers. (CVE-2013-5704)
Note: With this update, httpd has been modified to not merge HTTP Trailer
headers with other HTTP request headers. A newly introduced configuration
directive MergeTrailers can be used to re-enable the old method of
processing Trailer headers, which also re-introduces the aforementioned
flaw.
This update also fixes the following bug:
* Prior to this update, the mod_proxy_wstunnel module failed to set up an
SSL connection when configured to use a back end server using the "wss:"
URL scheme, causing proxied connections to fail. In these updated packages,
SSL is used when proxying to "wss:" back end servers. (BZ#1141950)
All httpd24-httpd users are advised to upgrade to these updated packages,
which contain backported patches to correct these issues. After installing
the updated packages, the httpd24-httpd service will be restarted
automatically.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Low"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated httpd24-httpd packages that fix two security issues and one bug\nare now available for Red Hat Software Collections 1.\n\nRed Hat Product Security has rated this update as having Low security\nimpact. Common Vulnerability Scoring System (CVSS) base scores, which give\ndetailed severity ratings, are available for each vulnerability from the\nCVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient,\nand extensible web server.\n\nA NULL pointer dereference flaw was found in the way the mod_cache httpd\nmodule handled Content-Type headers. A malicious HTTP server could cause\nthe httpd child process to crash when the Apache HTTP server was configured\nto proxy to a server with caching enabled. (CVE-2014-3581)\n\nA flaw was found in the way httpd handled HTTP Trailer headers when\nprocessing requests using chunked encoding. A malicious client could use\nTrailer headers to set additional HTTP headers after header processing was\nperformed by other modules. This could, for example, lead to a bypass of\nheader restrictions defined with mod_headers. (CVE-2013-5704)\n\nNote: With this update, httpd has been modified to not merge HTTP Trailer\nheaders with other HTTP request headers. A newly introduced configuration\ndirective MergeTrailers can be used to re-enable the old method of\nprocessing Trailer headers, which also re-introduces the aforementioned\nflaw.\n\nThis update also fixes the following bug:\n\n* Prior to this update, the mod_proxy_wstunnel module failed to set up an\nSSL connection when configured to use a back end server using the \"wss:\"\nURL scheme, causing proxied connections to fail. In these updated packages,\nSSL is used when proxying to \"wss:\" back end servers. (BZ#1141950)\n\nAll httpd24-httpd users are advised to upgrade to these updated packages,\nwhich contain backported patches to correct these issues. After installing\nthe updated packages, the httpd24-httpd service will be restarted\nautomatically.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2014:1972",
"url": "https://access.redhat.com/errata/RHSA-2014:1972"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#low",
"url": "https://access.redhat.com/security/updates/classification/#low"
},
{
"category": "external",
"summary": "1082903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1082903"
},
{
"category": "external",
"summary": "1141950",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1141950"
},
{
"category": "external",
"summary": "1149709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1149709"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2014/rhsa-2014_1972.json"
}
],
"title": "Red Hat Security Advisory: httpd24-httpd security and bug fix update",
"tracking": {
"current_release_date": "2024-09-13T09:21:01+00:00",
"generator": {
"date": "2024-09-13T09:21:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2014:1972",
"initial_release_date": "2014-12-09T18:07:45+00:00",
"revision_history": [
{
"date": "2014-12-09T18:07:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2014-12-09T18:07:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-13T09:21:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product": {
"name": "Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_software_collections:1::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Software Collections"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"product_id": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.6-22.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"product_id": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.6-22.el6?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"product": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"product_id": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.6-22.el6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.6-25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.6-25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"product_id": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.6-25.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-httpd-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-httpd-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.6-25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.6-25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.6-25.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"product_id": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.6-25.el7?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"product": {
"name": "httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"product_id": "httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.6-25.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.6-22.el6.src",
"product": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src",
"product_id": "httpd24-httpd-0:2.4.6-22.el6.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.6-22.el6?arch=src"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-0:2.4.6-25.el7.src",
"product": {
"name": "httpd24-httpd-0:2.4.6-25.el7.src",
"product_id": "httpd24-httpd-0:2.4.6-25.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd@2.4.6-25.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"product": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"product_id": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.6-22.el6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"product": {
"name": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"product_id": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.6-25.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.src",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)",
"product_id": "6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.4.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.src",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.5)",
"product_id": "6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.5.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.src",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.6)",
"product_id": "6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2-6.6.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.src",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)",
"product_id": "6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.src",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"relates_to_product_reference": "6Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-25.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-25.el7.src",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)",
"product_id": "7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Server-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-25.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src"
},
"product_reference": "httpd24-httpd-0:2.4.6-25.el7.src",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch"
},
"product_reference": "httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_session-0:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)",
"product_id": "7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
},
"product_reference": "httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"relates_to_product_reference": "7Workstation-RHSCL-1.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-5704",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"discovery_date": "2014-03-31T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1082903"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the way httpd handled HTTP Trailer headers when processing requests using chunked encoding. A malicious client could use Trailer headers to set additional HTTP headers after header processing was performed by other modules. This could, for example, lead to a bypass of header restrictions defined with mod_headers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: bypass of mod_headers rules via chunked requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue affects the versions of the httpd package as shipped with Red Hat JBoss Enterprise Application Platform 6; and Red Hat JBoss Web Server 2. Red Hat Product Security has rated this issue as having Low security impact. A future update may address this issue. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.\n\nRed Hat Certificate System does not use the mod_headers module, even when installed, and is thus not affected by this flaw.\n\nRed Hat Enterprise Linux 5 is now in Production 3 Phase of the support and maintenance life cycle. This has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.\n\nRed Hat JBoss Enterprise Application Platform 5 and Red Hat JBoss Web Server 1 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Low security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2013-5704"
},
{
"category": "external",
"summary": "RHBZ#1082903",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1082903"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2013-5704",
"url": "https://www.cve.org/CVERecord?id=CVE-2013-5704"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-5704",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-5704"
}
],
"release_date": "2013-10-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1972"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: bypass of mod_headers rules via chunked requests"
},
{
"cve": "CVE-2014-3581",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2014-10-06T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1149709"
}
],
"notes": [
{
"category": "description",
"text": "A NULL pointer dereference flaw was found in the way the mod_cache httpd module handled Content-Type headers. A malicious HTTP server could cause the httpd child process to crash when the Apache HTTP server was configured to proxy to a server with caching enabled.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "httpd: NULL pointer dereference in mod_cache if Content-Type has empty value",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue did not affect the versions of httpd as shipped with Red Hat Enterprise Linux 5 and 6, JBoss Enterprise Web Server 1 and 2, and JBoss Application Platform 6.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2014-3581"
},
{
"category": "external",
"summary": "RHBZ#1149709",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1149709"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2014-3581",
"url": "https://www.cve.org/CVERecord?id=CVE-2014-3581"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-3581",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3581"
}
],
"release_date": "2014-09-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to use the\nRed Hat Network to apply this update are available at\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2014:1972"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.6,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.4.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.4.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.5.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.5.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2-6.6.Z:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2-6.6.Z:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.src",
"6Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-22.el6.noarch",
"6Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-22.el6.x86_64",
"6Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-22.el6.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Server-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Server-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Server-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.src",
"7Workstation-RHSCL-1.2:httpd24-httpd-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-debuginfo-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-devel-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-httpd-manual-0:2.4.6-25.el7.noarch",
"7Workstation-RHSCL-1.2:httpd24-httpd-tools-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ldap-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_proxy_html-1:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_session-0:2.4.6-25.el7.x86_64",
"7Workstation-RHSCL-1.2:httpd24-mod_ssl-1:2.4.6-25.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "httpd: NULL pointer dereference in mod_cache if Content-Type has empty value"
}
]
}
Loading...