Known vulnerabilities in jbcs-httpd24-nghttp2 (Red Hat package) - page 4
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-nghttp2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-nghttp2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
83
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.64.0-3.el7jbcs
1.64.0-3.el8jbcs
1.43.0-13.el7jbcs
1.43.0-13.el8jbcs
1.43.0-12.el7jbcs
1.43.0-12.el8jbcs
1.39.2-34.jbcs.el6
1.39.2-34.jbcs.el7
1.43.0-11.el7jbcs
1.43.0-11.el8jbcs
1.43.0-10.el7jbcs
1.43.0-10.el8jbcs
1.39.2-41.jbcs.el7
1.39.2-41.el8jbcs
1.39.2-39.jbcs.el7
1.39.2-39.el8jbcs
1.39.2-37.el8jbcs
1.39.2-37.jbcs.el7
1.39.2-35.jbcs.el7
1.39.2-25.jbcs.el6
1.39.2-25.jbcs.el7
1.39.2-10.jbcs.el6
1.39.2-10.jbcs.el7
1.39.2-4.jbcs.el6
1.39.2-4.jbcs.el7
1.39.2-1.jbcs.el6
1.39.2-1.jbcs.el7
1.29.0-9.jbcs.el6
1.29.0-9.jbcs.el7
1.29.0-8.jbcs.el7
1.29.0-8.jbcs.el6
1.12.0-9.jbcs.el6
1.12.0-9.jbcs.el7
Vulnerabilities (83)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56064 - Out-of-bounds read CVE-2021-3712 |
CWE-125 | Medium | 1.39.2-39.el8jbcs, 1.39.2-39.jbcs.el7 | 24.08.2021 |
SB2021082414 SB2021082508 SB2021082510 and 142 more |
||
| #VU53780 - Permissions, Privileges, and Access Controls CVE-2019-17567 |
CWE-264 | Medium | 1.39.2-39.el8jbcs, 1.39.2-39.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 10 more |
||
| #VU53777 - NULL Pointer Dereference CVE-2021-26690 |
CWE-476 | Medium | 1.39.2-39.el8jbcs, 1.39.2-39.jbcs.el7 | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 17 more |
||
| #VU53773 - NULL Pointer Dereference CVE-2021-31618 |
CWE-476 | Medium | 1.39.2-37.el8jbcs | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 12 more |
||
| #VU53589 - Use After Free CVE-2021-22901 |
CWE-416 | High | 1.39.2-37.el8jbcs | 26.05.2021 |
SB2021052620 SB2021052711 SB2021052719 and 18 more |
||
| #VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-22890 |
CWE-300 | Medium | 1.39.2-37.el8jbcs | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 15 more |
||
| #VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876 |
CWE-200 | Medium | 1.39.2-37.el8jbcs | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 31 more |
||
| #VU51733 - NULL Pointer Dereference CVE-2021-3449 |
CWE-476 | Medium | 1.39.2-37.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 56 more |
||
| #VU51732 - Security Features CVE-2021-3450 |
CWE-254 | Medium | 1.39.2-37.jbcs.el7 | 25.03.2021 |
SB2021032518 SB2021032602 SB2021032617 and 50 more |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | 1.39.2-37.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120929 and 30 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 1.39.2-37.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
||
| #VU48893 - Exposure of sensitive information to an unauthorized actor CVE-2020-8284 |
CWE-200 | Medium | 1.39.2-37.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120927 and 31 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 1.39.2-35.jbcs.el7 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU29292 - Exposure of sensitive information to an unauthorized actor CVE-2020-8169 |
CWE-200 | Medium | 1.39.2-37.el8jbcs | 25.06.2020 |
SB2020062513 SB2020062514 SB2020063017 and 14 more |
||
| #VU26528 - Use of Uninitialized Variable CVE-2020-1934 |
CWE-457 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 02.04.2020 |
SB2020040204 SB2020041511 SB2020050202 and 20 more |
||
| #VU24489 - Missing release of memory after effective lifetime CVE-2019-19956 |
CWE-401 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 22.01.2020 |
SB2019122405 SB2020021011 SB2020052301 and 24 more |
||
| #VU24488 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-7595 |
CWE-835 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 22.01.2020 |
SB2020012220 SB2020021011 SB2020052301 and 30 more |
||
| #VU24487 - Missing release of memory after effective lifetime CVE-2019-20388 |
CWE-401 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 22.01.2020 |
SB2020012220 SB2020052301 SB2020062607 and 28 more |
||
| #VU21091 - Out-of-bounds read CVE-2019-15903 |
CWE-125 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 12.09.2019 |
SB2019091209 SB2019091210 SB2019091701 and 61 more |
||
| #VU18108 - Resource Management Errors CVE-2019-0197 |
CWE-399 | Medium | 1.39.2-25.jbcs.el6, 1.39.2-25.jbcs.el7 | 02.04.2019 |
SB2019040201 SB2019041607 SB2019041106 and 13 more |
Showing elements 61 - 80 out of 83