Known vulnerabilities in JBoss Core Services 2.4.51 SP1

Vendor: Red Hat Inc.
Software: JBoss Core Services
Version: 2.4.51 SP1
Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 19
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting JBoss Core Services version 2.4.51 SP1 JBoss Core Services 2.4.51 SP1 is affected by 19 vulnerabilities: 6 high, 11 medium, 2 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 2.4.62 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 2.4.62 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 2.4.62 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387		 CWE-476 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Public exploit available
No
 2.4.62 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 2.4.62 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Public exploit available
Exploited
 2.4.57 SP1, 2.4.57 SP2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 2.4.51 SP2 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72337 - Allocation of Resources Without Limits or Throttling
CVE-2023-23916		 CWE-770 Medium
No
No
 2.4.51 SP2 16.02.2023 SB2023021668
SB2023021670
SB2023021671
and 89 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915		 CWE-319 Medium
No
No
 2.4.51 SP2 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 2.4.51 SP2 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 2.4.51 SP2 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 2.4.51 SP2 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 2.4.51 SP2 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 2.4.51 SP2 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more