RHSA-2020:4384: jbcs-httpd24-apr Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 13-09-2024Last modified 14-10-2026

Open JSON

Vulnerability summary

RHSA-2020:4384 is a critical (CVSS 9.8) vulnerability in jbcs-httpd24-apr Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 5 · Downstream 0

CVE-2019-1551 CVE-2019-5435 CVE-2020-11984 CVE-2020-11993 CVE-2020-25680

Timeline

13-09-2024
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP5 security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat56 products

jbcs-httpd24-apr< 0:1.6.3-104.jbcs.el6 | < 0:1.6.3-104.jbcs.el7
jbcs-httpd24-apr-debuginfo< 0:1.6.3-104.jbcs.el6 | < 0:1.6.3-104.jbcs.el7
jbcs-httpd24-apr-devel< 0:1.6.3-104.jbcs.el6 | < 0:1.6.3-104.jbcs.el7
jbcs-httpd24-apr-util< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-debuginfo< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7

jbcs-httpd24-apr-util-devel< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-ldap< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-mysql< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-nss< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-odbc< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-openssl< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-pgsql< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-apr-util-sqlite< 0:1.6.1-75.jbcs.el6 | < 0:1.6.1-75.jbcs.el7
jbcs-httpd24-brotli< 0:1.0.6-38.jbcs.el6 | < 0:1.0.6-38.jbcs.el7
jbcs-httpd24-brotli-debuginfo< 0:1.0.6-38.jbcs.el6 | < 0:1.0.6-38.jbcs.el7
jbcs-httpd24-brotli-devel< 0:1.0.6-38.jbcs.el6 | < 0:1.0.6-38.jbcs.el7
jbcs-httpd24-curl< 0:7.64.1-44.jbcs.el6 | < 0:7.64.1-44.jbcs.el7
jbcs-httpd24-curl-debuginfo< 0:7.64.1-44.jbcs.el6 | < 0:7.64.1-44.jbcs.el7
jbcs-httpd24-httpd< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-httpd-debuginfo< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-httpd-devel< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-httpd-manual< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-httpd-selinux< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-httpd-tools< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-jansson< 0:2.11-53.jbcs.el6 | < 0:2.11-53.jbcs.el7
jbcs-httpd24-jansson-debuginfo< 0:2.11-53.jbcs.el6 | < 0:2.11-53.jbcs.el7
jbcs-httpd24-jansson-devel< 0:2.11-53.jbcs.el6 | < 0:2.11-53.jbcs.el7
jbcs-httpd24-libcurl< 0:7.64.1-44.jbcs.el6 | < 0:7.64.1-44.jbcs.el7
jbcs-httpd24-libcurl-devel< 0:7.64.1-44.jbcs.el6 | < 0:7.64.1-44.jbcs.el7
jbcs-httpd24-mod_cluster-native< 0:1.3.14-11.Final_redhat_2.jbcs.el6 | < 0:1.3.14-11.Final_redhat_2.jbcs.el7
jbcs-httpd24-mod_cluster-native-debuginfo< 0:1.3.14-11.Final_redhat_2.jbcs.el6 | < 0:1.3.14-11.Final_redhat_2.jbcs.el7
jbcs-httpd24-mod_http2< 0:1.15.7-11.jbcs.el6 | < 0:1.15.7-11.jbcs.el7
jbcs-httpd24-mod_http2-debuginfo< 0:1.15.7-11.jbcs.el6 | < 0:1.15.7-11.jbcs.el7
jbcs-httpd24-mod_jk< 0:1.2.48-10.redhat_1.jbcs.el6 | < 0:1.2.48-10.redhat_1.jbcs.el7
jbcs-httpd24-mod_jk-ap24< 0:1.2.48-10.redhat_1.jbcs.el6 | < 0:1.2.48-10.redhat_1.jbcs.el7
jbcs-httpd24-mod_jk-debuginfo< 0:1.2.48-10.redhat_1.jbcs.el6 | < 0:1.2.48-10.redhat_1.jbcs.el7
jbcs-httpd24-mod_jk-manual< 0:1.2.48-10.redhat_1.jbcs.el6 | < 0:1.2.48-10.redhat_1.jbcs.el7
jbcs-httpd24-mod_ldap< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-mod_md< 1:2.0.8-30.jbcs.el6 | < 1:2.0.8-30.jbcs.el7
jbcs-httpd24-mod_md-debuginfo< 1:2.0.8-30.jbcs.el6 | < 1:2.0.8-30.jbcs.el7
jbcs-httpd24-mod_proxy_html< 1:2.4.37-64.jbcs.el6 | < 1:2.4.37-64.jbcs.el7
jbcs-httpd24-mod_security< 0:2.9.2-57.GA.jbcs.el6 | < 0:2.9.2-57.GA.jbcs.el7
jbcs-httpd24-mod_security-debuginfo< 0:2.9.2-57.GA.jbcs.el6 | < 0:2.9.2-57.GA.jbcs.el7
jbcs-httpd24-mod_session< 0:2.4.37-64.jbcs.el6 | < 0:2.4.37-64.jbcs.el7
jbcs-httpd24-mod_ssl< 1:2.4.37-64.jbcs.el6 | < 1:2.4.37-64.jbcs.el7
jbcs-httpd24-nghttp2< 0:1.39.2-34.jbcs.el6 | < 0:1.39.2-34.jbcs.el7
jbcs-httpd24-nghttp2-debuginfo< 0:1.39.2-34.jbcs.el6 | < 0:1.39.2-34.jbcs.el7
jbcs-httpd24-nghttp2-devel< 0:1.39.2-34.jbcs.el6 | < 0:1.39.2-34.jbcs.el7
jbcs-httpd24-openssl< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7
jbcs-httpd24-openssl-chil< 0:1.0.0-1.jbcs.el7
jbcs-httpd24-openssl-chil-debuginfo< 0:1.0.0-1.jbcs.el7
jbcs-httpd24-openssl-debuginfo< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7
jbcs-httpd24-openssl-devel< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7
jbcs-httpd24-openssl-libs< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7
jbcs-httpd24-openssl-perl< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7
jbcs-httpd24-openssl-static< 1:1.1.1c-32.jbcs.el6 | < 1:1.1.1c-32.jbcs.el7

Show all 56

1 vendor · 56 products

References

27 links

Show all 27 references

nvd.nist.gov/vuln/detail/CVE-2019-1551Advisory
github.com/openssl/openssl/pull/10575ARTICLE
www.openssl.org/news/secadv/20191206.txtARTICLE
access.redhat.com/security/cve/CVE-2019-5435REPORT
www.cve.org/CVERecord?id=CVE-2019-5435Advisory
nvd.nist.gov/vuln/detail/CVE-2019-5435Advisory
access.redhat.com/security/cve/CVE-2020-11984REPORT
www.cve.org/CVERecord?id=CVE-2020-11984Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11984Advisory
httpd.apache.org/security/vulnerabilities_24.htmlARTICLE
access.redhat.com/security/cve/CVE-2020-11993REPORT
www.cve.org/CVERecord?id=CVE-2020-11993Advisory
nvd.nist.gov/vuln/detail/CVE-2020-11993Advisory
httpd.apache.org/security/vulnerabilities_24.htmlARTICLE
access.redhat.com/security/cve/CVE-2020-25680REPORT
www.cve.org/CVERecord?id=CVE-2020-25680Advisory
nvd.nist.gov/vuln/detail/CVE-2020-25680Advisory