https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:07:23.886284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:7457 ALSA-2024:7457 — Moderate: mod_jk bug fix update 2026-10-03T14:07:24.076646+00:00

Affected: AlmaLinux:9: mod_jk

The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine.

Bug Fix(es):

* Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855)

Security fix(es):

* mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800)

 https://cve.radiocsirt.org/vuln/bdu:2024-07563 bdu:2024-07563 2026-10-03T14:07:24.076748+00:00 bdu:2024-07563 https://cve.radiocsirt.org/vuln/euvd-2026-198838 EUVD-2026-198838 2026-10-03T14:07:24.076766+00:00 EUVD-2026-198838 https://cve.radiocsirt.org/vuln/fkie_cve-2024-46544 fkie_cve-2024-46544 2026-10-03T14:07:24.076778+00:00

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.

This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.

Users are recommended to upgrade to version 1.2.50, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-2582-53pq-96cq GHSA-2582-53pq-96cq 2026-10-03T14:07:24.076803+00:00

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.

This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.

Users are recommended to upgrade to version 1.2.50, which fixes the issue.

 https://cve.radiocsirt.org/vuln/rhsa-2024:6927 RHSA-2024:6927 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update 2026-10-03T14:07:24.076821+00:00

httpd: HTTP response splitting mod_jk: information Disclosure / DoS

 https://cve.radiocsirt.org/vuln/suse-su-2025:0102-1 SUSE-SU-2025:0102-1 — Security update for apache2-mod_jk 2026-10-03T14:07:24.076840+00:00

Security update for apache2-mod_jk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-46544 UBUNTU-CVE-2024-46544 2026-10-03T14:07:24.076856+00:00

Affected: Ubuntu:Pro:18.04:LTS: libapache-mod-jk, Ubuntu:Pro:20.04:LTS: libapache-mod-jk, Ubuntu:Pro:22.04:LTS: libapache-mod-jk, Ubuntu:Pro:24.04:LTS: libapache-mod-jk

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected. Users are recommended to upgrade to version 1.2.50, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2205 WID-SEC-W-2024-2205 — Apache Tomcat Connectors: Schwachstelle ermöglicht Denial of Service 2026-10-03T14:07:24.076882+00:00

Ein lokaler Angreifer kann eine Schwachstelle in Apache Tomcat Connectors ausnutzen, um einen Denial of Service Angriff durchzuführen.