Known vulnerabilities in jbcs-httpd24-apr-util (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-apr-util (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-apr-util_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
102
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.3-4.el7jbcs
1.6.3-4.el8jbcs
1.6.1-104.el7jbcs
1.6.1-104.el8jbcs
1.6.1-103.el7jbcs
1.6.1-103.el8jbcs
1.6.1-102.el7jbcs
1.6.1-102.el8jbcs
1.6.1-101.el7jbcs
1.6.1-101.el8jbcs
1.6.1-75.jbcs.el6
1.6.1-75.jbcs.el7
1.6.1-99.el7jbcs
1.6.1-99.el8jbcs
1.6.1-98.el7jbcs
1.6.1-98.el8jbcs
1.6.1-91.jbcs.el7
1.6.1-91.el8jbcs
1.6.1-84.jbcs.el7
1.6.1-84.el8jbcs
1.6.1-82.jbcs.el7
1.6.1-82.el8jbcs
1.6.1-54.jbcs.el6
1.6.1-54.jbcs.el7
1.6.1-48.jbcs.el6
1.6.1-48.jbcs.el7
1.6.1-24.jbcs.el6
1.6.1-24.jbcs.el7
1.6.1-9.jbcs.el7
1.6.1-9.jbcs.el6
Vulnerabilities (102)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720 |
CWE-444 | Medium | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 56 more |
||
| #VU60736 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25235 |
CWE-94 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 106 more |
||
| #VU60114 - Integer overflow CVE-2022-23990 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 28.01.2022 |
SB2022012504 SB2022012804 SB2022020902 and 46 more |
||
| #VU59966 - Integer overflow CVE-2022-23852 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 25.01.2022 |
SB2022012504 SB2022012622 SB2022020902 and 58 more |
||
| #VU59650 - Integer overflow CVE-2022-22827 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59648 - Integer overflow CVE-2022-22825 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59647 - Integer overflow CVE-2022-22824 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59646 - Integer overflow CVE-2022-22823 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59645 - Integer overflow CVE-2022-22822 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 59 more |
||
| #VU59643 - Integer overflow CVE-2021-46143 |
CWE-190 | High | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 58 more |
||
| #VU59642 - Resource exhaustion CVE-2021-45960 |
CWE-400 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU57062 - NULL Pointer Dereference CVE-2021-41524 |
CWE-476 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 05.10.2021 |
SB2021100514 SB2021100601 SB2021101513 and 5 more |
||
| #VU56680 - Out-of-bounds read CVE-2021-36160 |
CWE-125 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 22 more |
||
| #VU56679 - Memory corruption CVE-2021-39275 |
CWE-119 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33193 |
CWE-444 | Medium | 1.6.1-98.el7jbcs, 1.6.1-98.el8jbcs | 13.09.2021 |
SB2021091317 SB2021091707 SB2021092301 and 24 more |
||
| #VU54225 - Use After Free CVE-2021-3518 |
CWE-416 | High | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 40 more |
||
| #VU54224 - Out-of-bounds write CVE-2021-3517 |
CWE-787 | High | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 42 more |
||
| #VU54223 - NULL Pointer Dereference CVE-2021-3537 |
CWE-476 | Medium | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 27 more |
||
| #VU53289 - Improper input validation CVE-2021-3541 |
CWE-20 | Medium | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 16.05.2021 |
SB2021051601 SB2021051602 SB2021061811 and 32 more |
Showing elements 61 - 80 out of 102