Known vulnerabilities in jbcs-httpd24-mod_proxy_cluster (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_proxy_cluster_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
88
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.3.22-9.el7jbcs
1.3.22-9.el8jbcs
1.3.22-7.el7jbcs
1.3.22-7.el8jbcs
1.3.22-4.el7jbcs
1.3.22-4.el8jbcs
1.3.20-10.el7jbcs
1.3.20-10.el8jbcs
1.3.20-8.el7jbcs
1.3.20-8.el8jbcs
1.3.20-4.el7jbcs
1.3.20-4.el8jbcs
1.3.20-3.el7jbcs
1.3.20-3.el8jbcs
1.3.19-7.el7jbcs
1.3.19-7.el8jbcs
1.3.19-6.el7jbcs
1.3.19-6.el8jbcs
1.3.19-4.el7jbcs
1.3.19-4.el8jbcs
1.3.18-2.el7jbcs
1.3.18-2.el8jbcs
1.3.17-13.el7jbcs
1.3.17-13.el8jbcs
1.3.17-9.el7jbcs
1.3.17-9.el8jbcs
Vulnerabilities (88)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 37 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.3.19-6.el7jbcs, 1.3.19-6.el8jbcs, 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU80760 - Exposure of sensitive information to an unauthorized actor CVE-2023-41081 |
CWE-200 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 13.09.2023 |
SB2023091361 SB2023101769 SB2023120738 and 6 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU76237 - Improper Certificate Validation CVE-2023-28321 |
CWE-295 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 99 more |
||
| #VU76233 - Use After Free CVE-2023-28319 |
CWE-416 | Low | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 17.05.2023 |
SB2023051752 SB2023051761 SB2023051762 and 27 more |
||
| #VU74149 - Security Features CVE-2023-0466 |
CWE-254 | Low | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 86 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-27522 |
CWE-113 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 07.03.2023 |
SB2023030731 SB2023030862 SB2023030942 and 33 more |
||
| #VU72086 - Memory corruption CVE-2023-24021 |
CWE-119 | High | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 09.02.2023 |
SB2023020947 SB2023021587 SB2023021740 and 7 more |
||
| #VU72085 - Improper input validation CVE-2022-48279 |
CWE-20 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 09.02.2023 |
SB2023020946 SB2023020948 SB2023020949 and 15 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | 1.3.18-2.el7jbcs, 1.3.18-2.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2022-37436 |
CWE-113 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 1.3.19-4.el7jbcs, 1.3.19-4.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
Showing elements 21 - 40 out of 88