Where
-Infinity
0
Severity
4

Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7
SSRF

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update

1 / 2
Source: Red Hat

Remedy

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.<br>The References section of this erratum contains a download link. You must be logged in to download the update.
First published (updated )
Severity
7
Null Pointer Dereference, SSRF

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update

1 / 2
Source: Red Hat

Remedy

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.<br>The References section of this erratum contains a download link. You must be logged in to download the update.
First published (updated )
Severity
7
Null Pointer Dereference, SSRF

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
4

Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP4 security update

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
4

Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update

1 / 2
Source: Red Hat

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
4
Buffer Overflow, Use After Free

Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP3 security update

1 / 2
Source: Red Hat

Remedy

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.<br>The References section of this erratum contains a download link (you must log in to download the update).
First published (updated )
Severity
7
Buffer Overflow

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
7
Buffer Overflow, Integer Overflow

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update

1 / 2

Remedy

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.<br>The References section of this erratum contains a download link (you must log in to download the update).
First published (updated )
Severity
7

Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP1 security update

1 / 2

Remedy

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.<br>The References section of this erratum contains a download link (you must log in to download the update).
First published (updated )
Severity
4
Integer Overflow, Use After Free

Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 security update

1 / 2

Remedy

Before applying this update, make sure all previously released errata relevant to your system have been applied.<br>For details on how to apply this update, refer to:<br><a href="https://access.redhat.com/articles/11258" target="_blank">https://access.redhat.com/articles/11258</a>
First published (updated )
Severity
4

It was found that Red Hat JBoss Core Services incorrectly included CVE-2016-3705 as resolved in Apache HTTP 2.4.23 (erratum RHSA-2016:2957). The release did not include the fix to libxml2, leaving it vulnerable to a Denial of Service attack due to a Stack Overflow. This is a regression CVE for CVE-2016-3705.

First published (updated )
Severity
4

It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.

First published (updated )
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

It was found that Red Hat JBoss Core Services incorrectly fixed CVE-2016-3627 in Apache HTTP 2.4.23 (erratum RHSA-2016:2957), leaving libxml2 vulnerable to a Denial of Service attack via stack consumption.

1 / 3
Source: Red Hat
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203