Known vulnerabilities in JBoss Core Services 2.4.57 SP3
Vendor:
Red Hat Inc.
Software:
JBoss Core Services
Version:
2.4.57 SP3
Software CPE:
cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU104099 - Use After Free CVE-2024-56171 |
CWE-416 | High | 2.4.62 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU104098 - Stack-based buffer overflow CVE-2025-24928 |
CWE-121 | High | 2.4.62 | 20.02.2025 |
SB2025022003 SB2025022010 SB2025022023 and 111 more |
||
| #VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490 |
CWE-124 | High | 2.4.62 | 05.09.2024 |
SB20240905100 SB20240905101 SB20240905102 and 113 more |
||
| #VU93538 - NULL Pointer Dereference CVE-2024-36387 |
CWE-476 | Medium | 2.4.62 | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070890 and 18 more |
||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | 2.4.62 | 27.06.2024 |
SB2024062720 SB20240717135 SB2024072154 and 157 more |
||
| #VU86230 - Resource exhaustion CVE-2023-52425 |
CWE-400 | Medium | 2.4.62 | 07.02.2024 |
SB2024020750 SB2024020754 SB2024020765 and 120 more |