Known vulnerabilities in jbcs-httpd24-mod_http2 (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-mod_http2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_http2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
136
Public exploits:
15
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.0.29-10.el7jbcs
2.0.29-10.el8jbcs
2.0.29-8.el7jbcs
2.0.29-8.el8jbcs
2.0.29-5.el7jbcs
2.0.29-5.el8jbcs
1.15.19-43.el7jbcs
1.15.19-43.el8jbcs
1.15.19-41.el7jbcs
1.15.19-41.el8jbcs
1.15.19-37.el7jbcs
1.15.19-37.el8jbcs
1.15.19-36.el7jbcs
1.15.19-36.el8jbcs
1.15.19-32.el7jbcs
1.15.19-32.el8jbcs
1.15.19-30.el7jbcs
1.15.19-30.el8jbcs
1.15.19-28.el7jbcs
1.15.19-28.el8jbcs
1.15.19-23.el7jbcs
1.15.19-23.el8jbcs
1.15.7-11.jbcs.el6
1.15.7-11.jbcs.el7
1.15.19-20.el7jbcs
1.15.19-20.el8jbcs
1.15.19-17.el7jbcs
1.15.19-17.el8jbcs
1.15.7-22.jbcs.el7
1.15.7-22.el8jbcs
1.15.7-21.jbcs.el7
1.15.7-21.el8jbcs
1.15.7-19.jbcs.el7
1.15.7-19.el8jbcs
1.15.7-17.jbcs.el7
1.15.7-17.el8jbcs
1.15.7-14.jbcs.el7
1.15.7-12.jbcs.el7
1.15.7-3.jbcs.el6
1.15.7-3.jbcs.el7
1.11.3-22.jbcs.el6
1.11.3-22.jbcs.el7
1.11.3-8.jbcs.el6
1.11.3-8.jbcs.el7
Vulnerabilities (136)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 37 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.15.19-30.el7jbcs, 1.15.19-30.el8jbcs, 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU80760 - Exposure of sensitive information to an unauthorized actor CVE-2023-41081 |
CWE-200 | Medium | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 13.09.2023 |
SB2023091361 SB2023101769 SB2023120738 and 6 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU76651 - Resource Management Errors CVE-2023-2650 |
CWE-399 | Medium | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 30.05.2023 |
SB2023053040 SB2023053044 SB2023053045 and 131 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU76233 - Use After Free CVE-2023-28319 |
CWE-416 | Low | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051761 SB2023051762 and 27 more |
||
| #VU74149 - Security Features CVE-2023-0466 |
CWE-254 | Low | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 86 more |
||
| #VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465 |
CWE-347 | Low | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 100 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 1.15.19-32.el7jbcs, 1.15.19-32.el8jbcs | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU72086 - Memory corruption CVE-2023-24021 |
CWE-119 | High | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 09.02.2023 |
SB2023020947 SB2023021587 SB2023021740 and 7 more |
||
| #VU72085 - Improper input validation CVE-2022-48279 |
CWE-20 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 09.02.2023 |
SB2023020946 SB2023020948 SB2023020949 and 15 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 1.15.19-28.el7jbcs, 1.15.19-28.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 1.15.19-23.el7jbcs, 1.15.19-23.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
Showing elements 21 - 40 out of 136