Known vulnerabilities in jbcs-httpd24-apr (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-apr (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-apr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
56
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.7.0-8.el7jbcs
1.7.0-8.el8jbcs
1.6.3-104.jbcs.el6
1.6.3-104.jbcs.el7
1.7.0-6.el7jbcs
1.7.0-6.el8jbcs
1.6.3-107.jbcs.el7
1.6.3-107.el8jbcs
1.6.3-105.jbcs.el7
1.6.3-105.el8jbcs
1.6.3-86.jbcs.el6
1.6.3-86.jbcs.el7
1.6.3-73.jbcs.el6
1.6.3-73.jbcs.el7
1.6.3-63.jbcs.el6
1.6.3-63.jbcs.el7
1.6.3-31.jbcs.el6
1.6.3-31.jbcs.el7
1.6.3-14.jbcs.el7
1.6.3-14.jbcs.el6
Vulnerabilities (56)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU76233 - Use After Free CVE-2023-28319 |
CWE-416 | Low | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051761 SB2023051762 and 27 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU72086 - Memory corruption CVE-2023-24021 |
CWE-119 | High | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 09.02.2023 |
SB2023020947 SB2023021587 SB2023021740 and 7 more |
||
| #VU72085 - Improper input validation CVE-2022-48279 |
CWE-20 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 09.02.2023 |
SB2023020946 SB2023020948 SB2023020949 and 15 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 1.7.0-8.el7jbcs, 1.7.0-8.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU59649 - Integer overflow CVE-2022-22826 |
CWE-190 | High | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 54 more |
||
| #VU59647 - Integer overflow CVE-2022-22824 |
CWE-190 | High | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59646 - Integer overflow CVE-2022-22823 |
CWE-190 | High | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59645 - Integer overflow CVE-2022-22822 |
CWE-190 | High | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 59 more |
||
| #VU59643 - Integer overflow CVE-2021-46143 |
CWE-190 | High | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 58 more |
||
| #VU59642 - Resource exhaustion CVE-2021-45960 |
CWE-400 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU57062 - NULL Pointer Dereference CVE-2021-41524 |
CWE-476 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 05.10.2021 |
SB2021100514 SB2021100601 SB2021101513 and 5 more |
||
| #VU56680 - Out-of-bounds read CVE-2021-36160 |
CWE-125 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 22 more |
||
| #VU56679 - Memory corruption CVE-2021-39275 |
CWE-119 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33193 |
CWE-444 | Medium | 1.7.0-6.el7jbcs, 1.7.0-6.el8jbcs | 13.09.2021 |
SB2021091317 SB2021091707 SB2021092301 and 24 more |
Showing elements 1 - 20 out of 56