Known vulnerabilities in jbcs-httpd24-curl (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-curl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-curl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
117
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.11.0-4.el7jbcs
8.7.1-2.el7jbcs
8.7.1-2.el8jbcs
8.6.0-3.el7jbcs
8.6.0-3.el8jbcs
8.4.0-2.el7jbcs
8.4.0-2.el8jbcs
8.2.1-2.el7jbcs
8.2.1-2.el8jbcs
8.2.1-1.el7jbcs
8.2.1-1.el8jbcs
8.0.1-1.el7jbcs
8.0.1-1.el8jbcs
7.64.1-44.jbcs.el6
7.64.1-44.jbcs.el7
7.86.0-2.el7jbcs
7.86.0-2.el8jbcs
7.83.1-6.el7jbcs
7.83.1-6.el8jbcs
7.78.0-3.jbcs.el7
7.78.0-3.el8jbcs
7.78.0-2.jbcs.el7
7.78.0-2.el8jbcs
7.77.0-2.jbcs.el7
7.77.0-2.el8jbcs
7.64.1-36.jbcs.el6
7.64.1-36.jbcs.el7
7.64.1-21.jbcs.el6
7.64.1-21.jbcs.el7
7.64.1-14.jbcs.el6
7.64.1-14.jbcs.el7
Vulnerabilities (117)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 8.2.1-2.el7jbcs, 8.2.1-2.el8jbcs, 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU76233 - Use After Free CVE-2023-28319 |
CWE-416 | Low | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051761 SB2023051762 and 27 more |
||
| #VU74149 - Security Features CVE-2023-0466 |
CWE-254 | Low | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 86 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 8.4.0-2.el7jbcs, 8.4.0-2.el8jbcs | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU72086 - Memory corruption CVE-2023-24021 |
CWE-119 | High | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 09.02.2023 |
SB2023020947 SB2023021587 SB2023021740 and 7 more |
||
| #VU72085 - Improper input validation CVE-2022-48279 |
CWE-20 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 09.02.2023 |
SB2023020946 SB2023020948 SB2023020949 and 15 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU71754 - Integer overflow CVE-2022-25147 |
CWE-190 | High | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 02.02.2023 |
SB2023020210 SB2023020212 SB2023020942 and 49 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 8.2.1-1.el7jbcs, 8.2.1-1.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 8.0.1-1.el7jbcs, 8.0.1-1.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
Showing elements 21 - 40 out of 117