Known vulnerabilities in httpd (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
httpd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:httpd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
65
Public exploits:
12
Known exploited (KEV):
1
Breakdown by Severity Chart
2.4.57-11.el9_4.5
2.4.62-4.el9_6.6
2.4.63-13.el10_2.6
2.4.62-13.el9_8.6
2.4.63-1.el10_0.4
2.4.63-13.el10_2.4
2.4.63-13.el10_2.1
2.4.63-1.el10_0.3
2.4.57-11.el9_4.4
2.4.53-11.el9_2.14
2.4.51-7.el9_0.11
2.4.6-99.el7_9.7
2.2.15-71.el6_10.2
2.4.62-7.el9_7.3
2.4.63-4.el10_1.3
2.4.63-1.el10_0.2
2.2.15-71.el6_10.1
2.4.6-90.el7_7.6
2.4.6-99.el7_9.6
2.4.57-11.el9_4.3
2.4.53-11.el9_2.13
2.4.51-7.el9_0.10
2.4.6-40.el7_2.6
2.4.6-40.el7_2.4
2.4.62-1.el9
2.4.6-99.el7_9.3
2.4.6-90.el7_7.5
2.4.51-7.el9_0.8
2.4.53-11.el9_2.11
2.4.57-11.el9_4.1
2.4.53-11.el9_2.10
2.4.6-90.el7_7.4
2.4.51-7.el9_0.7
2.4.53-11.el9_2.8
2.4.57-11.el9_4
2.4.53-11.el9_2.6
2.4.6-31.el7_1.1
2.2.3-63.el5_8.1
2.2.15-15.el6_2.1
2.2.3-53.el5_7.3
2.2.15-9.el6_1.3
2.2.3-45.el5_6.2
2.2.3-43.el5_5.3
2.2.3-31.el5_4.4
2.2.3-31.el5_4.2
2.2.3-22.el5_3.2
2.2.3-22.el5_3.1
2.2.3-11.el5_2.4
2.2.3-11.el5_1.3
2.0.59-1.el4s1.10
2.0.59-1.el4s1.7
2.4.57-8.el9
2.4.57-5.el9
2.4.51-7.el9_0.4
2.4.53-7.el9_1.5
2.4.6-98.el7_9.7
2.4.53-7.el9_1.1
2.4.53-7.el9
2.4.6-89.el7_6.4
2.4.6-45.el7_3.8
2.4.6-67.el7_4.9
2.4.6-90.el7_7.3
2.2.15-70.el6_10
2.4.6-97.el7_9.5
2.4.6-40.el7_2.7
2.4.6-45.el7_3.6
2.4.6-67.el7_4.7
2.4.6-89.el7_6.2
2.4.6-90.el7_7.1
2.4.6-97.el7_9.1
2.4.6-95.el7
2.4.6-40.el7
2.4.6-93.el7
2.4.6-90.el7
2.2.26-57.ep6.el6
2.2.3-7.el5
2.2.3-11.el5
2.2.4-7.el5s2
2.2.4-9.el5s2
2.2.8-1.el5s2
2.2.10-1.el5s2
2.2.10-4.ep5.el5
2.2.11-2.el5s2
2.2.10-10.ep5.el5
2.2.11-3.el5s2
2.2.13-2.el5s2
2.2.10-11.ep5.el5
2.2.14-1.2.1.ep5.el5
2.2.14-1.2.6.jdk6.ep5.el5
2.2.17-11.1.ep5.el5
2.2.17-11.2.ep5.el6
2.2.17-14.1.ep5.el5
2.2.17-13.2.ep5.el6
2.2.13-3.el5s2
2.2.17-15.4.ep5.el5
2.2.17-15.4.ep5.el6
2.2.3-74.el5
2.2.3-78.el5_9
2.2.22-23.ep6.el5
2.2.22-23.ep6.el6
2.2.3-82.el5_9
2.2.22-25.ep6.el5
2.2.22-25.ep6.el6
2.2.3-85.el5_10
2.2.22-27.ep6.el5
2.2.22-27.ep6.el6
2.2.3-87.el5_10
2.4.6-18.el7_0
2.2.26-35.ep6.el6
2.2.26-35.ep6.el5
2.4.6-31.el7
2.2.26-38.ep6.el6
2.2.26-41.ep6.el5
2.2.26-41.ep6.el6
2.2.3-92.el5_11
2.2.26-54.ep6.el6
2.2.15-69.el6
2.2.15-60.el6_9
2.2.15-59.el6
2.2.15-56.el6_8
2.2.15-55.el6_8
2.2.15-54.el6_8
2.2.15-53.el6
2.2.15-47.el6_7
2.2.15-45.el6
2.2.15-39.el6
2.2.15-31.el6_5
2.2.15-30.el6_5
2.2.15-29.el6_4
2.2.15-28.el6_4
2.2.15-26.el6
2.2.15-15.el6_2
2.2.15-15.el6
2.2.15-9.el6_1
2.2.15-9.el6
2.2.15-5.el6
Vulnerabilities (65)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU112730 - Security Features CVE-2025-23048 |
CWE-254 | Medium | 2.4.51-7.el9_0.10, 2.4.53-11.el9_2.13, 2.4.57-11.el9_4.3, 2.4.63-1.el10_0.2 | 10.07.2025 |
SB2025071040 SB2025071764 SB2025072111 and 30 more |
||
| #VU112728 - Cryptographic Issues CVE-2025-49812 |
CWE-310 | Medium | 2.2.15-71.el6_10.1, 2.4.6-90.el7_7.6, 2.4.6-99.el7_9.6, 2.4.51-7.el9_0.10, 2.4.53-11.el9_2.13, 2.4.57-11.el9_4.3, 2.4.63-1.el10_0.2 | 10.07.2025 |
SB2025071040 SB2025071764 SB2025072111 and 35 more |
||
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 2.4.53-11.el9_2.10, 2.4.57-11.el9_4 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 2.4.6-90.el7_7.4, 2.4.51-7.el9_0.7, 2.4.53-11.el9_2.8, 2.4.57-11.el9_4 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 2.4.6-90.el7_7.5, 2.4.6-99.el7_9.3, 2.4.51-7.el9_0.8, 2.4.53-11.el9_2.11, 2.4.57-11.el9_4.1 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 2.4.6-90.el7_7.4, 2.4.51-7.el9_0.7, 2.4.53-11.el9_2.8, 2.4.57-11.el9_4 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 2.4.6-90.el7_7.4, 2.4.51-7.el9_0.7, 2.4.53-11.el9_2.8, 2.4.57-11.el9_4 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 2.4.53-11.el9_2.10, 2.4.57-11.el9_4 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2024-24795 |
CWE-113 | Medium | 2.4.62-1.el9 | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 39 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 2.4.57-8.el9 | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-25690 |
CWE-113 | Medium | 2.4.6-98.el7_9.7, 2.4.51-7.el9_0.4, 2.4.53-7.el9_1.5, 2.4.57-5.el9 | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 54 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 2.4.53-11.el9_2.6, 2.4.57-5.el9 | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 2.4.53-7.el9_1.1 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 2.4.53-7.el9_1.1 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 2.4.53-7.el9_1.1 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
||
| #VU64083 - Out-of-bounds read CVE-2022-28615 |
CWE-125 | Low | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 41 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
||
| #VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377 |
CWE-444 | Medium | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 39 more |
||
| #VU61285 - Integer overflow CVE-2022-22721 |
CWE-190 | High | 2.4.53-7.el9 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 39 more |
||
| #VU61284 - Out-of-bounds write CVE-2022-23943 |
CWE-787 | High | 2.4.53-7.el9 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 34 more |
Showing elements 21 - 40 out of 65