Known vulnerabilities in jbcs-httpd24-apr-util (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-apr-util (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-apr-util_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
102
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.3-4.el7jbcs
1.6.3-4.el8jbcs
1.6.1-104.el7jbcs
1.6.1-104.el8jbcs
1.6.1-103.el7jbcs
1.6.1-103.el8jbcs
1.6.1-102.el7jbcs
1.6.1-102.el8jbcs
1.6.1-101.el7jbcs
1.6.1-101.el8jbcs
1.6.1-75.jbcs.el6
1.6.1-75.jbcs.el7
1.6.1-99.el7jbcs
1.6.1-99.el8jbcs
1.6.1-98.el7jbcs
1.6.1-98.el8jbcs
1.6.1-91.jbcs.el7
1.6.1-91.el8jbcs
1.6.1-84.jbcs.el7
1.6.1-84.el8jbcs
1.6.1-82.jbcs.el7
1.6.1-82.el8jbcs
1.6.1-54.jbcs.el6
1.6.1-54.jbcs.el7
1.6.1-48.jbcs.el6
1.6.1-48.jbcs.el7
1.6.1-24.jbcs.el6
1.6.1-24.jbcs.el7
1.6.1-9.jbcs.el7
1.6.1-9.jbcs.el6
Vulnerabilities (102)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 21.06.2022 |
SB2022062120 SB2022062125 SB2022062236 and 135 more |
||
| #VU64086 - Resource exhaustion CVE-2022-30522 |
CWE-400 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061723 and 31 more |
||
| #VU64083 - Out-of-bounds read CVE-2022-28615 |
CWE-125 | Low | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 41 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
||
| #VU64080 - Out-of-bounds read CVE-2022-28330 |
CWE-125 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022070730 and 11 more |
||
| #VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377 |
CWE-444 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 39 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
||
| #VU61285 - Integer overflow CVE-2022-22721 |
CWE-190 | High | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 39 more |
||
| #VU61284 - Out-of-bounds write CVE-2022-23943 |
CWE-787 | High | 1.6.1-99.el7jbcs, 1.6.1-99.el8jbcs | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 34 more |
||
| #VU60739 - Integer overflow CVE-2022-25315 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 99 more |
||
| #VU60738 - Integer overflow CVE-2022-25314 |
CWE-190 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 68 more |
||
| #VU60737 - Stack-based buffer overflow CVE-2022-25313 |
CWE-121 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 64 more |
||
| #VU60733 - Improper input validation CVE-2022-25236 |
CWE-20 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 109 more |
||
| #VU59649 - Integer overflow CVE-2022-22826 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
Showing elements 41 - 60 out of 102