Known vulnerabilities in jbcs-httpd24-mod_security (Red Hat package) - page 5
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_security_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
128
Public exploits:
14
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.9.6-16.el7jbcs
2.9.6-16.el8jbcs
2.9.6-14.el7jbcs
2.9.6-14.el8jbcs
2.9.6-11.el7jbcs
2.9.6-11.el8jbcs
2.9.3-42.el7jbcs
2.9.3-42.el8jbcs
2.9.3-40.el7jbcs
2.9.3-40.el8jbcs
2.9.3-36.el7jbcs
2.9.3-36.el8jbcs
2.9.3-34.el7jbcs
2.9.3-34.el8jbcs
2.9.3-32.el7jbcs
2.9.3-32.el8jbcs
2.9.3-31.el7jbcs
2.9.3-31.el8jbcs
2.9.3-29.el7jbcs
2.9.3-29.el8jbcs
2.9.3-24.el7jbcs
2.9.3-24.el8jbcs
2.9.2-57.GA.jbcs.el6
2.9.2-57.GA.jbcs.el7
2.9.3-22.el7jbcs
2.9.3-22.el8jbcs
2.9.3-19.el7jbcs
2.9.3-19.el8jbcs
2.9.2-68.GA.jbcs.el7
2.9.2-68.GA.el8jbcs
2.9.2-67.GA.jbcs.el7
2.9.2-67.GA.el8jbcs
2.9.2-65.GA.jbcs.el7
2.9.2-65.GA.el8jbcs
2.9.2-63.GA.jbcs.el7
2.9.2-63.GA.el8jbcs
2.9.2-60.GA.jbcs.el7
2.9.2-58.GA.jbcs.el7
2.9.2-51.GA.jbcs.el6
2.9.2-51.GA.jbcs.el7
2.9.2-20.GA.jbcs.el6
2.9.2-20.GA.jbcs.el7
2.9.2-16.GA.jbcs.el6
2.9.2-16.GA.jbcs.el7
2.9.1-23.GA.jbcs.el7
2.9.1-23.GA.jbcs.el6
2.9.1-19.GA.jbcs.el7
2.9.1-19.GA.jbcs.el6
2.9.1-18.GA.jbcs.el6
2.9.1-18.GA.jbcs.el7
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778 |
CWE-835 | Medium | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 15.03.2022 |
SB2022031520 SB2022031522 SB2022031611 and 238 more |
||
| #VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720 |
CWE-444 | Medium | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 14.03.2022 |
SB2022031416 SB2022031504 SB2022031724 and 56 more |
||
| #VU60922 - Use After Free CVE-2022-23308 |
CWE-416 | High | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 01.03.2022 |
SB2022030109 SB2022030110 SB2022031503 and 59 more |
||
| #VU59646 - Integer overflow CVE-2022-22823 |
CWE-190 | High | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 57 more |
||
| #VU59645 - Integer overflow CVE-2022-22822 |
CWE-190 | High | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 59 more |
||
| #VU59643 - Integer overflow CVE-2021-46143 |
CWE-190 | High | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 58 more |
||
| #VU59642 - Resource exhaustion CVE-2021-45960 |
CWE-400 | Medium | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.01.2022 |
SB2022011711 SB2022011713 SB2022020902 and 56 more |
||
| #VU59057 - Server-Side Request Forgery (SSRF) CVE-2021-44224 |
CWE-918 | Medium | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 20.12.2021 |
SB2021122005 SB2021122021 SB2021122709 and 33 more |
||
| #VU57062 - NULL Pointer Dereference CVE-2021-41524 |
CWE-476 | Medium | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 05.10.2021 |
SB2021100514 SB2021100601 SB2021101513 and 5 more |
||
| #VU56680 - Out-of-bounds read CVE-2021-36160 |
CWE-125 | Medium | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 22 more |
||
| #VU56679 - Memory corruption CVE-2021-39275 |
CWE-119 | Medium | 2.9.3-19.el7jbcs, 2.9.3-19.el8jbcs | 17.09.2021 |
SB2021091706 SB2021091707 SB2021092301 and 44 more |
||
| #VU54225 - Use After Free CVE-2021-3518 |
CWE-416 | High | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 40 more |
||
| #VU54224 - Out-of-bounds write CVE-2021-3517 |
CWE-787 | High | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 42 more |
||
| #VU54223 - NULL Pointer Dereference CVE-2021-3537 |
CWE-476 | Medium | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 27 more |
||
| #VU54222 - Use After Free CVE-2021-3516 |
CWE-416 | High | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 18.06.2021 |
SB2020110609 SB2021061811 SB2021063005 and 28 more |
||
| #VU53776 - NULL Pointer Dereference CVE-2021-26691 |
CWE-476 | Low | 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 26 more |
||
| #VU53289 - Improper input validation CVE-2021-3541 |
CWE-20 | Medium | 2.9.2-68.GA.el8jbcs, 2.9.2-68.GA.jbcs.el7 | 16.05.2021 |
SB2021051601 SB2021051602 SB2021061811 and 32 more |
||
| #VU50745 - Improper input validation CVE-2021-23840 |
CWE-20 | Medium | 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 | 17.02.2021 |
SB2021021702 SB2021021817 SB2021022420 and 83 more |
||
| #VU29488 - Integer overflow CVE-2020-14155 |
CWE-190 | High | 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 | 02.07.2020 |
SB2020070226 SB2020081713 SB2021010712 and 37 more |
||
| #VU30256 - Out-of-bounds read CVE-2019-20838 |
CWE-125 | Medium | 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7 | 15.06.2020 |
SB2020061529 SB2021010712 SB2021020201 and 24 more |
Showing elements 81 - 100 out of 128