Known vulnerabilities in jbcs-httpd24-mod_security (Red Hat package) 2.9.2-63.GA.el8jbcs - page 2

Vendor: Red Hat Inc.
Software: jbcs-httpd24-mod_security (Red Hat package)
Version: 2.9.2-63.GA.el8jbcs
Software CPE: cpe:2.3:o:red_hat:jbcs-httpd24-mod_security_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting jbcs-httpd24-mod_security (Red Hat package) version 2.9.2-63.GA.el8jbcs jbcs-httpd24-mod_security (Red Hat package) 2.9.2-63.GA.el8jbcs is affected by 40 vulnerabilities: 18 high, 21 medium, 1 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Public exploit available
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU60922 - Use After Free
CVE-2022-23308		 CWE-416 High
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 01.03.2022 SB2022030109
SB2022030110
SB2022031503
and 59 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Public exploit available
Exploited
 2.9.2-65.GA.el8jbcs, 2.9.2-65.GA.jbcs.el7 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56064 - Out-of-bounds read
CVE-2021-3712		 CWE-125 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more
#VU54225 - Use After Free
CVE-2021-3518		 CWE-416 High
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 40 more
#VU54224 - Out-of-bounds write
CVE-2021-3517		 CWE-787 High
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 42 more
#VU54223 - NULL Pointer Dereference
CVE-2021-3537		 CWE-476 Medium
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 27 more
#VU54222 - Use After Free
CVE-2021-3516		 CWE-416 High
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 18.06.2021 SB2020110609
SB2021061811
SB2021063005
and 28 more
#VU53780 - Permissions, Privileges, and Access Controls
CVE-2019-17567		 CWE-264 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 10 more
#VU53778 - NULL Pointer Dereference
CVE-2020-13950		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 15 more
#VU53777 - NULL Pointer Dereference
CVE-2021-26690		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 17 more
#VU53776 - NULL Pointer Dereference
CVE-2021-26691		 CWE-476 Low
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 26 more
#VU53775 - Stack-based buffer overflow
CVE-2020-35452		 CWE-121 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 19 more
#VU53774 - Improper input validation
CVE-2021-30641		 CWE-20 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53289 - Improper input validation
CVE-2021-3541		 CWE-20 Medium
No
No
 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 16.05.2021 SB2021051601
SB2021051602
SB2021061811
and 32 more
#VU50745 - Improper input validation
CVE-2021-23840		 CWE-20 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU29488 - Integer overflow
CVE-2020-14155		 CWE-190 High
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 02.07.2020 SB2020070226
SB2020081713
SB2021010712
and 37 more
#VU30256 - Out-of-bounds read
CVE-2019-20838		 CWE-125 Medium
No
No
 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 15.06.2020 SB2020061529
SB2021010712
SB2021020201
and 24 more


Showing elements 21 - 40 out of 40