RHSA-2023:3354: jbcs-httpd24-apr-util Red Hat

CVSS: 9.8v3.1CriticalPublished

Published 14-09-2024Last modified 15-10-2026

Open JSON

Vulnerability summary

RHSA-2023:3354 is a critical (CVSS 9.8) vulnerability in jbcs-httpd24-apr-util Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 14 · Downstream 0

CVE-2006-20001 CVE-2022-25147 CVE-2022-4304 CVE-2022-43551 CVE-2022-43552 CVE-2022-4450+8 more

Timeline

14-09-2024
PublishedVulnerability first disclosed.
15-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 SP2 security update

CVSS metrics

1 score · 1 source · 1 version

v3.19.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat44 products

jbcs-httpd24-apr-util< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-debuginfo< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-devel< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-ldap< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-ldap-debuginfo< 0:1.6.1-101.el8jbcs

jbcs-httpd24-apr-util-mysql< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-mysql-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-nss< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-nss-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-odbc< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-odbc-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-openssl< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-openssl-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-pgsql< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-pgsql-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-sqlite< 0:1.6.1-101.el7jbcs | < 0:1.6.1-101.el8jbcs
jbcs-httpd24-apr-util-sqlite-debuginfo< 0:1.6.1-101.el8jbcs
jbcs-httpd24-curl< 0:8.0.1-1.el7jbcs | < 0:8.0.1-1.el8jbcs
jbcs-httpd24-curl-debuginfo< 0:8.0.1-1.el7jbcs | < 0:8.0.1-1.el8jbcs
jbcs-httpd24-httpd< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-debuginfo< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-devel< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-manual< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-selinux< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-tools< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo< 0:2.4.51-39.el8jbcs
jbcs-httpd24-libcurl< 0:8.0.1-1.el7jbcs | < 0:8.0.1-1.el8jbcs
jbcs-httpd24-libcurl-debuginfo< 0:8.0.1-1.el8jbcs
jbcs-httpd24-libcurl-devel< 0:8.0.1-1.el7jbcs | < 0:8.0.1-1.el8jbcs
jbcs-httpd24-mod_ldap< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo< 0:2.4.51-39.el8jbcs
jbcs-httpd24-mod_proxy_html< 1:2.4.51-39.el7jbcs | < 1:2.4.51-39.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo< 1:2.4.51-39.el8jbcs
jbcs-httpd24-mod_session< 0:2.4.51-39.el7jbcs | < 0:2.4.51-39.el8jbcs
jbcs-httpd24-mod_session-debuginfo< 0:2.4.51-39.el8jbcs
jbcs-httpd24-mod_ssl< 1:2.4.51-39.el7jbcs | < 1:2.4.51-39.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo< 1:2.4.51-39.el8jbcs
jbcs-httpd24-openssl< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-debuginfo< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-devel< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-libs< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-libs-debuginfo< 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-perl< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs
jbcs-httpd24-openssl-static< 1:1.1.1k-14.el7jbcs | < 1:1.1.1k-14.el8jbcs

Show all 44

1 vendor · 44 products

References

69 links

Show all 69 references

bugzilla.redhat.com/show_bug.cgi?id=2167813REPORT
bugzilla.redhat.com/show_bug.cgi?id=2167815REPORT
bugzilla.redhat.com/show_bug.cgi?id=2169652REPORT
bugzilla.redhat.com/show_bug.cgi?id=2176209REPORT
bugzilla.redhat.com/show_bug.cgi?id=2179062REPORT
bugzilla.redhat.com/show_bug.cgi?id=2179069REPORT
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3354.jsonAdvisory
access.redhat.com/security/cve/CVE-2006-20001REPORT
www.cve.org/CVERecord?id=CVE-2006-20001Advisory
nvd.nist.gov/vuln/detail/CVE-2006-20001Advisory
httpd.apache.org/security/vulnerabilities_24.htmlARTICLE
access.redhat.com/security/cve/CVE-2022-4304REPORT
www.cve.org/CVERecord?id=CVE-2022-4304Advisory
nvd.nist.gov/vuln/detail/CVE-2022-4304Advisory
www.openssl.org/news/secadv/20230207.txtARTICLE
access.redhat.com/security/cve/CVE-2022-4450REPORT
www.cve.org/CVERecord?id=CVE-2022-4450Advisory
nvd.nist.gov/vuln/detail/CVE-2022-4450Advisory
access.redhat.com/security/cve/CVE-2022-25147REPORT
www.cve.org/CVERecord?id=CVE-2022-25147Advisory
nvd.nist.gov/vuln/detail/CVE-2022-25147Advisory
access.redhat.com/security/cve/CVE-2022-43551REPORT
www.cve.org/CVERecord?id=CVE-2022-43551Advisory
nvd.nist.gov/vuln/detail/CVE-2022-43551Advisory
curl.se/docs/CVE-2022-43551.htmlARTICLE
access.redhat.com/security/cve/CVE-2022-43552REPORT
www.cve.org/CVERecord?id=CVE-2022-43552Advisory
nvd.nist.gov/vuln/detail/CVE-2022-43552Advisory
curl.se/docs/CVE-2022-43552.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-0215REPORT
www.cve.org/CVERecord?id=CVE-2023-0215Advisory
nvd.nist.gov/vuln/detail/CVE-2023-0215Advisory
access.redhat.com/security/cve/CVE-2023-0286REPORT
www.cve.org/CVERecord?id=CVE-2023-0286Advisory
nvd.nist.gov/vuln/detail/CVE-2023-0286Advisory
access.redhat.com/security/cve/CVE-2023-23914REPORT
www.cve.org/CVERecord?id=CVE-2023-23914Advisory
nvd.nist.gov/vuln/detail/CVE-2023-23914Advisory
curl.se/docs/CVE-2023-23914.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-23915REPORT
www.cve.org/CVERecord?id=CVE-2023-23915Advisory
nvd.nist.gov/vuln/detail/CVE-2023-23915Advisory
curl.se/docs/CVE-2023-23915.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-23916REPORT
www.cve.org/CVERecord?id=CVE-2023-23916Advisory
nvd.nist.gov/vuln/detail/CVE-2023-23916Advisory
curl.se/docs/CVE-2023-23916.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-25690REPORT
www.cve.org/CVERecord?id=CVE-2023-25690Advisory
nvd.nist.gov/vuln/detail/CVE-2023-25690Advisory
httpd.apache.org/security/vulnerabilities_24.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-27533REPORT
www.cve.org/CVERecord?id=CVE-2023-27533Advisory
nvd.nist.gov/vuln/detail/CVE-2023-27533Advisory
curl.se/docs/CVE-2023-27533.htmlARTICLE
access.redhat.com/security/cve/CVE-2023-27534REPORT
www.cve.org/CVERecord?id=CVE-2023-27534Advisory
nvd.nist.gov/vuln/detail/CVE-2023-27534Advisory
curl.se/docs/CVE-2023-27534.htmlARTICLE