Known vulnerabilities in jbcs-httpd24-httpd (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-httpd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-httpd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
136
Public exploits:
15
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.4.62-13.el7jbcs
2.4.62-13.el8jbcs
2.4.62-11.el7jbcs
2.4.62-11.el8jbcs
2.4.62-8.el7jbcs
2.4.62-8.el8jbcs
2.4.57-15.el7jbcs
2.4.57-15.el8jbcs
2.4.57-13.el7jbcs
2.4.57-13.el8jbcs
2.4.57-10.el7jbcs
2.4.57-10.el8jbcs
2.4.57-9.el7jbcs
2.4.57-9.el8jbcs
2.4.57-7.el7jbcs
2.4.57-7.el8jbcs
2.4.57-6.el7jbcs
2.4.57-6.el8jbcs
2.4.57-5.el7jbcs
2.4.57-5.el8jbcs
2.4.51-39.el7jbcs
2.4.51-39.el8jbcs
2.4.37-64.jbcs.el6
2.4.37-64.jbcs.el7
2.4.51-37.el7jbcs
2.4.51-37.el8jbcs
2.4.51-28.el7jbcs
2.4.51-28.el8jbcs
2.4.37-80.jbcs.el7
2.4.37-80.el8jbcs
2.4.37-78.jbcs.el7
2.4.37-78.el8jbcs
2.4.37-76.jbcs.el7
2.4.37-76.el8jbcs
2.4.37-74.jbcs.el7
2.4.37-74.el8jbcs
2.4.37-70.jbcs.el7
2.4.37-66.jbcs.el7
2.4.37-57.jbcs.el6
2.4.37-57.jbcs.el7
2.4.37-52.jbcs.el6
2.4.37-52.jbcs.el7
2.4.37-41.jbcs.el6
2.4.37-41.jbcs.el7
2.4.37-33.jbcs.el6
2.4.37-33.jbcs.el7
2.4.29-41.jbcs.el6
2.4.29-41.jbcs.el7
2.4.29-40.jbcs.el6
2.4.29-40.jbcs.el7
2.4.29-35.jbcs.el6
2.4.29-35.jbcs.el7
2.4.29-17.jbcs.el7
2.4.29-17.jbcs.el6
2.4.23-125.jbcs.el7
2.4.23-125.jbcs.el6
2.4.23-122.jbcs.el7
2.4.23-122.jbcs.el6
2.4.23-120.jbcs.el7
2.4.23-120.jbcs.el6
2.4.6-77.SP1.jbcs.el6
2.4.6-77.SP1.jbcs.el7
2.4.23-102.jbcs.el6
2.4.23-102.jbcs.el7
Vulnerabilities (136)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-25690 |
CWE-113 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 54 more |
||
| #VU72337 - Allocation of Resources Without Limits or Throttling CVE-2023-23916 |
CWE-770 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021670 SB2023021671 and 89 more |
||
| #VU72336 - Cleartext Transmission of Sensitive Information CVE-2023-23915 |
CWE-319 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 26 more |
||
| #VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914 |
CWE-319 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 16.02.2023 |
SB2023021668 SB2023021671 SB2023021672 and 29 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU71754 - Integer overflow CVE-2022-25147 |
CWE-190 | High | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 02.02.2023 |
SB2023020210 SB2023020212 SB2023020942 and 49 more |
||
| #VU70457 - Security Features CVE-2022-43551 |
CWE-254 | Medium | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2023010612 and 32 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 2.4.51-39.el7jbcs, 2.4.51-39.el8jbcs | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
||
| #VU64086 - Resource exhaustion CVE-2022-30522 |
CWE-400 | Medium | 2.4.51-37.el7jbcs, 2.4.51-37.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061723 and 31 more |
Showing elements 41 - 60 out of 136