Known vulnerabilities in jbcs-httpd24-apr-util (Red Hat package) - page 5
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-apr-util (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-apr-util_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
102
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.3-4.el7jbcs
1.6.3-4.el8jbcs
1.6.1-104.el7jbcs
1.6.1-104.el8jbcs
1.6.1-103.el7jbcs
1.6.1-103.el8jbcs
1.6.1-102.el7jbcs
1.6.1-102.el8jbcs
1.6.1-101.el7jbcs
1.6.1-101.el8jbcs
1.6.1-75.jbcs.el6
1.6.1-75.jbcs.el7
1.6.1-99.el7jbcs
1.6.1-99.el8jbcs
1.6.1-98.el7jbcs
1.6.1-98.el8jbcs
1.6.1-91.jbcs.el7
1.6.1-91.el8jbcs
1.6.1-84.jbcs.el7
1.6.1-84.el8jbcs
1.6.1-82.jbcs.el7
1.6.1-82.el8jbcs
1.6.1-54.jbcs.el6
1.6.1-54.jbcs.el7
1.6.1-48.jbcs.el6
1.6.1-48.jbcs.el7
1.6.1-24.jbcs.el6
1.6.1-24.jbcs.el7
1.6.1-9.jbcs.el7
1.6.1-9.jbcs.el6
Vulnerabilities (102)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
||
| #VU60922 - Use After Free CVE-2022-23308 |
CWE-416 | High | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 01.03.2022 |
SB2022030109 SB2022030110 SB2022031503 and 59 more |
||
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU54222 - Use After Free CVE-2021-3516 |
CWE-416 | High | 1.6.1-91.el8jbcs, 1.6.1-91.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 28 more |
||
| #VU53780 - Permissions, Privileges, and Access Controls CVE-2019-17567 |
CWE-264 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 10 more |
||
| #VU53778 - NULL Pointer Dereference CVE-2020-13950 |
CWE-476 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 15 more |
||
| #VU53777 - NULL Pointer Dereference CVE-2021-26690 |
CWE-476 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 17 more |
||
| #VU53776 - NULL Pointer Dereference CVE-2021-26691 |
CWE-476 | Low | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 26 more |
||
| #VU53775 - Stack-based buffer overflow CVE-2020-35452 |
CWE-121 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 19 more |
||
| #VU53774 - Improper input validation CVE-2021-30641 |
CWE-20 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 20 more |
||
| #VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-22890 |
CWE-300 | Medium | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 15 more |
||
| #VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876 |
CWE-200 | Medium | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 31 more |
||
| #VU50745 - Improper input validation CVE-2021-23840 |
CWE-20 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 83 more |
||
| #VU50740 - NULL Pointer Dereference CVE-2021-23841 |
CWE-476 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 66 more |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120929 and 30 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
||
| #VU48893 - Exposure of sensitive information to an unauthorized actor CVE-2020-8284 |
CWE-200 | Medium | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120927 and 31 more |
||
| #VU29488 - Integer overflow CVE-2020-14155 |
CWE-190 | High | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 02.07.2020 |
SB2020070226 SB2020081713 SB2021010712 and 37 more |
||
| #VU29292 - Exposure of sensitive information to an unauthorized actor CVE-2020-8169 |
CWE-200 | Medium | 1.6.1-82.el8jbcs, 1.6.1-82.jbcs.el7 | 25.06.2020 |
SB2020062513 SB2020062514 SB2020063017 and 14 more |
||
| #VU30256 - Out-of-bounds read CVE-2019-20838 |
CWE-125 | Medium | 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7 | 15.06.2020 |
SB2020061529 SB2021010712 SB2021020201 and 24 more |
Showing elements 81 - 100 out of 102