RHSA-2020:2644

Advisory lineage Upstream: 9 Downstream: 0
Published: 13 Sept 2024, 22:41
Last modified:15 May 2026, 10:06

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Sept 2024, 22:41
Published
Vulnerability first disclosed
15 May 2026, 10:06
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP3 security update

CVSS Metrics

  • v3.1HIGHScore: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Systems

  • redhatjbcs-httpd24-curl

    < 0:7.64.1-36.jbcs.el6 | < 0:7.64.1-36.jbcs.el7

  • redhatjbcs-httpd24-curl-debuginfo

    < 0:7.64.1-36.jbcs.el6 | < 0:7.64.1-36.jbcs.el7

  • redhatjbcs-httpd24-httpd

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-httpd-debuginfo

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-httpd-devel

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-httpd-manual

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-httpd-selinux

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-httpd-tools

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-libcurl

    < 0:7.64.1-36.jbcs.el6 | < 0:7.64.1-36.jbcs.el7

  • redhatjbcs-httpd24-libcurl-devel

    < 0:7.64.1-36.jbcs.el6 | < 0:7.64.1-36.jbcs.el7

  • redhatjbcs-httpd24-mod_cluster-native

    < 0:1.3.14-4.Final_redhat_2.jbcs.el6 | < 0:1.3.14-4.Final_redhat_2.jbcs.el7

  • redhatjbcs-httpd24-mod_cluster-native-debuginfo

    < 0:1.3.14-4.Final_redhat_2.jbcs.el6 | < 0:1.3.14-4.Final_redhat_2.jbcs.el7

  • redhatjbcs-httpd24-mod_http2

    < 0:1.15.7-3.jbcs.el6 | < 0:1.15.7-3.jbcs.el7

  • redhatjbcs-httpd24-mod_http2-debuginfo

    < 0:1.15.7-3.jbcs.el6 | < 0:1.15.7-3.jbcs.el7

  • redhatjbcs-httpd24-mod_jk

    < 0:1.2.48-4.redhat_1.jbcs.el6 | < 0:1.2.48-4.redhat_1.jbcs.el7

  • redhatjbcs-httpd24-mod_jk-ap24

    < 0:1.2.48-4.redhat_1.jbcs.el6 | < 0:1.2.48-4.redhat_1.jbcs.el7

  • redhatjbcs-httpd24-mod_jk-debuginfo

    < 0:1.2.48-4.redhat_1.jbcs.el6 | < 0:1.2.48-4.redhat_1.jbcs.el7

  • redhatjbcs-httpd24-mod_jk-manual

    < 0:1.2.48-4.redhat_1.jbcs.el6 | < 0:1.2.48-4.redhat_1.jbcs.el7

  • redhatjbcs-httpd24-mod_ldap

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-mod_md

    < 1:2.0.8-24.jbcs.el6 | < 1:2.0.8-24.jbcs.el7

  • redhatjbcs-httpd24-mod_md-debuginfo

    < 1:2.0.8-24.jbcs.el6 | < 1:2.0.8-24.jbcs.el7

  • redhatjbcs-httpd24-mod_proxy_html

    < 1:2.4.37-57.jbcs.el6 | < 1:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-mod_security

    < 0:2.9.2-51.GA.jbcs.el6 | < 0:2.9.2-51.GA.jbcs.el7

  • redhatjbcs-httpd24-mod_security-debuginfo

    < 0:2.9.2-51.GA.jbcs.el6 | < 0:2.9.2-51.GA.jbcs.el7

  • redhatjbcs-httpd24-mod_session

    < 0:2.4.37-57.jbcs.el6 | < 0:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-mod_ssl

    < 1:2.4.37-57.jbcs.el6 | < 1:2.4.37-57.jbcs.el7

  • redhatjbcs-httpd24-nghttp2

    < 0:1.39.2-25.jbcs.el6 | < 0:1.39.2-25.jbcs.el7

  • redhatjbcs-httpd24-nghttp2-debuginfo

    < 0:1.39.2-25.jbcs.el6 | < 0:1.39.2-25.jbcs.el7

  • redhatjbcs-httpd24-nghttp2-devel

    < 0:1.39.2-25.jbcs.el6 | < 0:1.39.2-25.jbcs.el7

  • redhatjbcs-httpd24-openssl-pkcs11

    < 0:0.4.10-7.jbcs.el7

  • redhatjbcs-httpd24-openssl-pkcs11-debuginfo

    < 0:0.4.10-7.jbcs.el7

References (44)