Known vulnerabilities in httpd (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
httpd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:httpd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
63
Public exploits:
12
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.62-13.el9_8.6
2.4.63-1.el10_0.4
2.4.63-13.el10_2.4
2.4.63-13.el10_2.1
2.4.63-1.el10_0.3
2.4.57-11.el9_4.4
2.4.53-11.el9_2.14
2.4.51-7.el9_0.11
2.4.6-99.el7_9.7
2.2.15-71.el6_10.2
2.4.62-7.el9_7.3
2.4.63-4.el10_1.3
2.4.63-1.el10_0.2
2.2.15-71.el6_10.1
2.4.6-90.el7_7.6
2.4.6-99.el7_9.6
2.4.57-11.el9_4.3
2.4.53-11.el9_2.13
2.4.51-7.el9_0.10
2.4.6-40.el7_2.6
2.4.6-40.el7_2.4
2.4.62-1.el9
2.4.6-99.el7_9.3
2.4.6-90.el7_7.5
2.4.51-7.el9_0.8
2.4.53-11.el9_2.11
2.4.57-11.el9_4.1
2.4.53-11.el9_2.10
2.4.6-90.el7_7.4
2.4.51-7.el9_0.7
2.4.53-11.el9_2.8
2.4.57-11.el9_4
2.4.53-11.el9_2.6
2.4.6-31.el7_1.1
2.2.3-63.el5_8.1
2.2.15-15.el6_2.1
2.2.3-53.el5_7.3
2.2.15-9.el6_1.3
2.2.3-45.el5_6.2
2.2.3-43.el5_5.3
2.2.3-31.el5_4.4
2.2.3-31.el5_4.2
2.2.3-22.el5_3.2
2.2.3-22.el5_3.1
2.2.3-11.el5_2.4
2.2.3-11.el5_1.3
2.0.59-1.el4s1.10
2.0.59-1.el4s1.7
2.4.57-8.el9
2.4.57-5.el9
2.4.51-7.el9_0.4
2.4.53-7.el9_1.5
2.4.6-98.el7_9.7
2.4.53-7.el9_1.1
2.4.53-7.el9
2.4.6-89.el7_6.4
2.4.6-45.el7_3.8
2.4.6-67.el7_4.9
2.4.6-90.el7_7.3
2.2.15-70.el6_10
2.4.6-97.el7_9.5
2.4.6-40.el7_2.7
2.4.6-45.el7_3.6
2.4.6-67.el7_4.7
2.4.6-89.el7_6.2
2.4.6-90.el7_7.1
2.4.6-97.el7_9.1
2.4.6-95.el7
2.4.6-40.el7
2.4.6-93.el7
2.4.6-90.el7
2.2.26-57.ep6.el6
2.2.3-7.el5
2.2.3-11.el5
2.2.4-7.el5s2
2.2.4-9.el5s2
2.2.8-1.el5s2
2.2.10-1.el5s2
2.2.10-4.ep5.el5
2.2.11-2.el5s2
2.2.10-10.ep5.el5
2.2.11-3.el5s2
2.2.13-2.el5s2
2.2.10-11.ep5.el5
2.2.14-1.2.1.ep5.el5
2.2.14-1.2.6.jdk6.ep5.el5
2.2.17-11.1.ep5.el5
2.2.17-11.2.ep5.el6
2.2.17-14.1.ep5.el5
2.2.17-13.2.ep5.el6
2.2.13-3.el5s2
2.2.17-15.4.ep5.el5
2.2.17-15.4.ep5.el6
2.2.3-74.el5
2.2.3-78.el5_9
2.2.22-23.ep6.el5
2.2.22-23.ep6.el6
2.2.3-82.el5_9
2.2.22-25.ep6.el5
2.2.22-25.ep6.el6
2.2.3-85.el5_10
2.2.22-27.ep6.el5
2.2.22-27.ep6.el6
2.2.3-87.el5_10
2.4.6-18.el7_0
2.2.26-35.ep6.el6
2.2.26-35.ep6.el5
2.4.6-31.el7
2.2.26-38.ep6.el6
2.2.26-41.ep6.el5
2.2.26-41.ep6.el6
2.2.3-92.el5_11
2.2.26-54.ep6.el6
2.2.15-69.el6
2.2.15-60.el6_9
2.2.15-59.el6
2.2.15-56.el6_8
2.2.15-55.el6_8
2.2.15-54.el6_8
2.2.15-53.el6
2.2.15-47.el6_7
2.2.15-45.el6
2.2.15-39.el6
2.2.15-31.el6_5
2.2.15-30.el6_5
2.2.15-29.el6_4
2.2.15-28.el6_4
2.2.15-26.el6
2.2.15-15.el6_2
2.2.15-15.el6
2.2.15-9.el6_1
2.2.15-9.el6
2.2.15-5.el6
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
||
| #VU64088 - Out-of-bounds read CVE-2022-30556 |
CWE-125 | Medium | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 31 more |
||
| #VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377 |
CWE-444 | Medium | 2.4.53-7.el9 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 39 more |
||
| #VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720 |
CWE-444 | Medium | 2.2.15-70.el6_10, 2.4.6-45.el7_3.8, 2.4.6-67.el7_4.9, 2.4.6-89.el7_6.4, 2.4.6-90.el7_7.3, 2.4.6-97.el7_9.5 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 56 more |
||
| #VU59056 - Memory corruption CVE-2021-44790 |
CWE-119 | Critical | 2.4.6-45.el7_3.8, 2.4.6-67.el7_4.9, 2.4.6-89.el7_6.4, 2.4.6-90.el7_7.3 | 20.12.2021 |
SB2021122005 SB2021122021 SB2022010513 and 50 more |
||
| #VU56678 - Server-Side Request Forgery (SSRF) CVE-2021-40438 |
CWE-918 | High | 2.4.6-40.el7_2.7, 2.4.6-45.el7_3.6, 2.4.6-67.el7_4.7, 2.4.6-89.el7_6.2, 2.4.6-90.el7_7.1, 2.4.6-97.el7_9.1 | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 42 more |
||
| #VU35776 - Improper input validation CVE-2020-11985 |
CWE-20 | Medium | 2.4.6-40.el7 | 08.08.2020 |
SB2020080805 SB2020080807 SB2020090925 and 2 more |
||
| #VU26528 - Use of Uninitialized Variable CVE-2020-1934 |
CWE-457 | Medium | 2.4.6-95.el7 | 02.04.2020 |
SB2020040204 SB2020041511 SB2020050202 and 20 more |
||
| #VU26527 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2020-1927 |
CWE-601 | Medium | 2.4.6-95.el7 | 02.04.2020 |
SB2020040204 SB2020041511 SB2020050202 and 17 more |
||
| #VU20374 - Improper input validation CVE-2019-10098 |
CWE-20 | Medium | 2.4.6-95.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 19 more |
||
| #VU17178 - Improper Access Control CVE-2018-17199 |
CWE-284 | Low | 2.4.6-93.el7 | 23.01.2019 |
SB2019012307 SB2019012308 SB2019012508 and 18 more |
||
| #VU11284 - Permissions, Privileges, and Access Controls CVE-2017-15715 |
CWE-264 | Low | 2.4.6-95.el7 | 27.03.2018 |
SB2018032703 SB2018040401 SB2018040502 and 13 more |
||
| #VU11283 - Out-of-bounds write CVE-2017-15710 |
CWE-787 | Medium | 2.4.6-93.el7 | 27.03.2018 |
SB2018032703 SB2018040401 SB2018040502 and 13 more |
||
| #VU11282 - Improper input validation CVE-2018-1283 |
CWE-20 | Low | 2.4.6-95.el7 | 27.03.2018 |
SB2018032703 SB2018040401 SB2018040502 and 12 more |
||
| #VU11281 - Out-of-bounds read CVE-2018-1301 |
CWE-125 | Medium | 2.4.6-93.el7 | 27.03.2018 |
SB2018032703 SB2018040401 SB2018040502 and 13 more |
||
| #VU11280 - Out-of-bounds read CVE-2018-1303 |
CWE-125 | Medium | 2.4.6-95.el7 | 27.03.2018 |
SB2018032703 SB2018040401 SB2018040502 and 12 more |
||
| #VU7517 - Exposure of sensitive information to an unauthorized actor CVE-2017-9788 |
CWE-200 | Low | 2.4.6-40.el7_2.6 | 13.07.2017 |
SB2017062001 SB2017071403 SB2017071307 and 17 more |
||
| #VU7119 - Out-of-bounds read CVE-2017-7679 |
CWE-125 | Medium | 2.4.6-40.el7_2.6 | 20.06.2017 |
SB2017062001 SB2017062807 SB2017063012 and 26 more |
||
| #VU7116 - Authentication Bypass Issues CVE-2017-3169 |
CWE-592 | Medium | 2.4.6-40.el7_2.6 | 20.06.2017 |
SB2017062001 SB2017062807 SB2017063012 and 26 more |
||
| #VU7117 - Out-of-bounds read CVE-2017-7668 |
CWE-125 | Medium | 2.4.6-40.el7_2.6 | 20.06.2017 |
SB2017062001 SB2017062807 SB2017063012 and 17 more |
Showing elements 41 - 60 out of 63