<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 08:20:08 +0000</lastBuildDate>
    <item>
      <title>ALSA-2024:7457 — Moderate: mod_jk bug fix update</title>
      <link>https://cve.radiocsirt.org/vuln/alsa-2024:7457</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: mod_jk&lt;/p&gt;
&lt;p&gt;The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine.&lt;/p&gt;
&lt;p&gt;Bug Fix(es):&lt;/p&gt;
&lt;p&gt;* Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855)&lt;/p&gt;
&lt;p&gt;Security fix(es):&lt;/p&gt;
&lt;p&gt;* mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; AlmaLinux:9: mod_jk&lt;/p&gt;
&lt;p&gt;The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine.&lt;/p&gt;
&lt;p&gt;Bug Fix(es):&lt;/p&gt;
&lt;p&gt;* Rebase to upstream 1.2.50 release (JIRA:AlmaLinux-58855)&lt;/p&gt;
&lt;p&gt;Security fix(es):&lt;/p&gt;
&lt;p&gt;* mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:AlmaLinux-59800)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/alsa-2024:7457</guid>
    </item>
    <item>
      <title>bdu:2024-07563</title>
      <link>https://cve.radiocsirt.org/vuln/bdu:2024-07563</link>
      <description>bdu:2024-07563</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/bdu:2024-07563</guid>
    </item>
    <item>
      <title>EUVD-2026-198838</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-198838</link>
      <description>EUVD-2026-198838</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-198838</guid>
    </item>
    <item>
      <title>fkie_cve-2024-46544</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-46544</link>
      <description>&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-46544</guid>
    </item>
    <item>
      <title>GHSA-2582-53pq-96cq</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-2582-53pq-96cq</link>
      <description>&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-2582-53pq-96cq</guid>
    </item>
    <item>
      <title>RHSA-2024:6927 — Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update</title>
      <link>https://cve.radiocsirt.org/vuln/rhsa-2024:6927</link>
      <description>&lt;p&gt;httpd: HTTP response splitting mod_jk: information Disclosure / DoS&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;httpd: HTTP response splitting mod_jk: information Disclosure / DoS&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/rhsa-2024:6927</guid>
    </item>
    <item>
      <title>SUSE-SU-2025:0102-1 — Security update for apache2-mod_jk</title>
      <link>https://cve.radiocsirt.org/vuln/suse-su-2025:0102-1</link>
      <description>&lt;p&gt;Security update for apache2-mod_jk&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Security update for apache2-mod_jk&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/suse-su-2025:0102-1</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2024-46544</title>
      <link>https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-46544</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: libapache-mod-jk, Ubuntu:Pro:20.04:LTS: libapache-mod-jk, Ubuntu:Pro:22.04:LTS: libapache-mod-jk, Ubuntu:Pro:24.04:LTS: libapache-mod-jk&lt;/p&gt;
&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected. Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: libapache-mod-jk, Ubuntu:Pro:20.04:LTS: libapache-mod-jk, Ubuntu:Pro:22.04:LTS: libapache-mod-jk, Ubuntu:Pro:24.04:LTS: libapache-mod-jk&lt;/p&gt;
&lt;p&gt;Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected. Users are recommended to upgrade to version 1.2.50, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-46544</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-2205 — Apache Tomcat Connectors: Schwachstelle ermöglicht Denial of Service</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2205</link>
      <description>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Apache Tomcat Connectors ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in Apache Tomcat Connectors ausnutzen, um einen Denial of Service Angriff durchzuführen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2205</guid>
    </item>
  </channel>
</rss>
