Known vulnerabilities in jbcs-httpd24-apr-util (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-apr-util (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-apr-util_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
102
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.3-4.el7jbcs
1.6.3-4.el8jbcs
1.6.1-104.el7jbcs
1.6.1-104.el8jbcs
1.6.1-103.el7jbcs
1.6.1-103.el8jbcs
1.6.1-102.el7jbcs
1.6.1-102.el8jbcs
1.6.1-101.el7jbcs
1.6.1-101.el8jbcs
1.6.1-75.jbcs.el6
1.6.1-75.jbcs.el7
1.6.1-99.el7jbcs
1.6.1-99.el8jbcs
1.6.1-98.el7jbcs
1.6.1-98.el8jbcs
1.6.1-91.jbcs.el7
1.6.1-91.el8jbcs
1.6.1-84.jbcs.el7
1.6.1-84.el8jbcs
1.6.1-82.jbcs.el7
1.6.1-82.el8jbcs
1.6.1-54.jbcs.el6
1.6.1-54.jbcs.el7
1.6.1-48.jbcs.el6
1.6.1-48.jbcs.el7
1.6.1-24.jbcs.el6
1.6.1-24.jbcs.el7
1.6.1-9.jbcs.el7
1.6.1-9.jbcs.el6
Vulnerabilities (102)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU76233 - Use After Free CVE-2023-28319 |
CWE-416 | Low | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051761 SB2023051762 and 27 more |
||
| #VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-25690 |
CWE-113 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 54 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU72337 - Allocation of Resources Without Limits or Throttling CVE-2023-23916 |
CWE-770 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021670 SB2023021671 and 89 more |
||
| #VU72336 - Cleartext Transmission of Sensitive Information CVE-2023-23915 |
CWE-319 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 26 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU72086 - Memory corruption CVE-2023-24021 |
CWE-119 | High | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 09.02.2023 |
SB2023020947 SB2023021587 SB2023021740 and 7 more |
||
| #VU72085 - Improper input validation CVE-2022-48279 |
CWE-20 | Medium | 1.6.1-102.el7jbcs, 1.6.1-102.el8jbcs | 09.02.2023 |
SB2023020946 SB2023020948 SB2023020949 and 15 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU71754 - Integer overflow CVE-2022-25147 |
CWE-190 | High | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 02.02.2023 |
SB2023020210 SB2023020212 SB2023020942 and 49 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 1.6.1-101.el7jbcs, 1.6.1-101.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
Showing elements 21 - 40 out of 102