Known vulnerabilities in httpd24-nghttp2 (Red Hat package)

Vendor: Red Hat Inc.
Software: httpd24-nghttp2 (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:httpd24-nghttp2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting httpd24-nghttp2 (Red Hat package) httpd24-nghttp2 (Red Hat package) is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 1.7.1-11.el7 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU28538 - Resource exhaustion
CVE-2020-11080		 CWE-400 Medium
No
No
 1.7.1-8.el6.1, 1.7.1-8.el7.1 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more