Known vulnerabilities in jbcs-httpd24-curl (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-curl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-curl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
117
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.11.0-4.el7jbcs
8.7.1-2.el7jbcs
8.7.1-2.el8jbcs
8.6.0-3.el7jbcs
8.6.0-3.el8jbcs
8.4.0-2.el7jbcs
8.4.0-2.el8jbcs
8.2.1-2.el7jbcs
8.2.1-2.el8jbcs
8.2.1-1.el7jbcs
8.2.1-1.el8jbcs
8.0.1-1.el7jbcs
8.0.1-1.el8jbcs
7.64.1-44.jbcs.el6
7.64.1-44.jbcs.el7
7.86.0-2.el7jbcs
7.86.0-2.el8jbcs
7.83.1-6.el7jbcs
7.83.1-6.el8jbcs
7.78.0-3.jbcs.el7
7.78.0-3.el8jbcs
7.78.0-2.jbcs.el7
7.78.0-2.el8jbcs
7.77.0-2.jbcs.el7
7.77.0-2.el8jbcs
7.64.1-36.jbcs.el6
7.64.1-36.jbcs.el7
7.64.1-21.jbcs.el6
7.64.1-21.jbcs.el7
7.64.1-14.jbcs.el6
7.64.1-14.jbcs.el7
Vulnerabilities (117)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88153 - Resource exhaustion CVE-2024-27316 |
CWE-400 | Medium | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040545 and 51 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87852 - Improper Validation of Certificate with Host Mismatch CVE-2024-2466 |
CWE-297 | Medium | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 14 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87848 - Improper Certificate Validation CVE-2024-2379 |
CWE-295 | Low | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 12 more |
||
| #VU87846 - Improper input validation CVE-2024-2004 |
CWE-20 | Low | 8.7.1-2.el7jbcs, 8.7.1-2.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032748 and 28 more |
||
| #VU87679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-6710 |
CWE-79 | Medium | 8.6.0-3.el7jbcs, 8.6.0-3.el8jbcs | 20.03.2024 |
SB2024032066 SB2024032068 SB2024032069 and 2 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 8.6.0-3.el7jbcs, 8.6.0-3.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU83899 - Missing Encryption of Sensitive Data CVE-2023-46219 |
CWE-311 | Medium | 8.6.0-3.el7jbcs, 8.6.0-3.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 31 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 8.6.0-3.el7jbcs, 8.6.0-3.el8jbcs | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 8.6.0-3.el7jbcs, 8.6.0-3.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 37 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU80760 - Exposure of sensitive information to an unauthorized actor CVE-2023-41081 |
CWE-200 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 13.09.2023 |
SB2023091361 SB2023101769 SB2023120738 and 6 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU76651 - Resource Management Errors CVE-2023-2650 |
CWE-399 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 30.05.2023 |
SB2023053040 SB2023053044 SB2023053045 and 131 more |
||
| #VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465 |
CWE-347 | Low | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 100 more |
Showing elements 1 - 20 out of 117