Known vulnerabilities in jbcs-httpd24-nghttp2 (Red Hat package)
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-nghttp2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-nghttp2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
83
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.64.0-3.el7jbcs
1.64.0-3.el8jbcs
1.43.0-13.el7jbcs
1.43.0-13.el8jbcs
1.43.0-12.el7jbcs
1.43.0-12.el8jbcs
1.39.2-34.jbcs.el6
1.39.2-34.jbcs.el7
1.43.0-11.el7jbcs
1.43.0-11.el8jbcs
1.43.0-10.el7jbcs
1.43.0-10.el8jbcs
1.39.2-41.jbcs.el7
1.39.2-41.el8jbcs
1.39.2-39.jbcs.el7
1.39.2-39.el8jbcs
1.39.2-37.el8jbcs
1.39.2-37.jbcs.el7
1.39.2-35.jbcs.el7
1.39.2-25.jbcs.el6
1.39.2-25.jbcs.el7
1.39.2-10.jbcs.el6
1.39.2-10.jbcs.el7
1.39.2-4.jbcs.el6
1.39.2-4.jbcs.el7
1.39.2-1.jbcs.el6
1.39.2-1.jbcs.el7
1.29.0-9.jbcs.el6
1.29.0-9.jbcs.el7
1.29.0-8.jbcs.el7
1.29.0-8.jbcs.el6
1.12.0-9.jbcs.el6
1.12.0-9.jbcs.el7
Vulnerabilities (83)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88153 - Resource exhaustion CVE-2024-27316 |
CWE-400 | Medium | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040545 and 51 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87852 - Improper Validation of Certificate with Host Mismatch CVE-2024-2466 |
CWE-297 | Medium | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 14 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87848 - Improper Certificate Validation CVE-2024-2379 |
CWE-295 | Low | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 12 more |
||
| #VU87846 - Improper input validation CVE-2024-2004 |
CWE-20 | Low | 1.43.0-13.el7jbcs, 1.43.0-13.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032748 and 28 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.43.0-12.el7jbcs, 1.43.0-12.el8jbcs | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916 |
CWE-319 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102703 and 27 more |
||
| #VU68748 - Double Free CVE-2022-42915 |
CWE-415 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102662 SB2022102705 and 26 more |
||
| #VU68746 - Expected Behavior Violation CVE-2022-32221 |
CWE-440 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 26.10.2022 |
SB2022102624 SB2022102643 SB2022102644 and 58 more |
||
| #VU66881 - Improper input validation CVE-2022-35252 |
CWE-20 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 31.08.2022 |
SB2022083106 SB2022090108 SB2022090217 and 55 more |
||
| #VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208 |
CWE-347 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 73 more |
||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 35 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
||
| #VU64086 - Resource exhaustion CVE-2022-30522 |
CWE-400 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061723 and 31 more |
||
| #VU64083 - Out-of-bounds read CVE-2022-28615 |
CWE-125 | Low | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 41 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
||
| #VU64080 - Out-of-bounds read CVE-2022-28330 |
CWE-125 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 08.06.2022 |
SB2022060817 SB2022060901 SB2022070730 and 11 more |
||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | 1.43.0-11.el7jbcs, 1.43.0-11.el8jbcs | 03.05.2022 |
SB2022050315 SB2022050436 SB2022050503 and 141 more |
Showing elements 1 - 20 out of 83