Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update

🗓️ 07 Dec 2023 13:55:16Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 75 Views

Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update for multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 5031
vulnersOsv	com.ericsson.research.trap.transports:wshttp-server-netty (=1.4.2), com.github.kristofa:brave-grpc (>=3.6.0 <=3.7.0) +95 more potentially affected by CVE-2023-44487 via io.netty:netty-codec-http2 (>=4.1.0.Beta4 <=4.1.0.Final)	10 Oct 202322:22	–	vulnersosv
vulnersOsv	aind-data-transfer (>=0.1.13 <=0.35.3), aind-dispim-processing (>=0.0.1 <=0.0.4) +25 more potentially affected by CVE-2023-45853 via pyminizip (=0.2.6)	14 Oct 202303:31	–	vulnersosv
vulnersOsv	ai.mantik:bridge-protocol_2.13 (>=0.4.0 <=0.4.0-rc1), ai.mantik:componently_2.13 (>=0.4.0 <=0.4.0-rc1) +858 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.13 (>=10.1.8 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +705 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-server (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	aind-data-transfer (>=0.1.13 <=0.35.3), aind-dispim-processing (>=0.0.1 <=0.0.4) +25 more potentially affected by CVE-2023-45853 via pyminizip (=0.2.6)	29 Jun 202611:50	–	vulnersosv
vulnersOsv	ai.agnos:reactive-sparql_2.12 (>=0.3.0 <=0.3.1), ai.lum:odinson-rest-api_2.12 (>=0.2.0 <=0.5.0) +1253 more potentially affected by CVE-2023-44487 via com.typesafe.akka:akka-http-core_2.12 (>=10.0.0-RC2 <=10.5.2)	10 Oct 202321:28	–	vulnersosv
vulnersOsv	com.atlan:package-toolkit-testing (>=5.3.1 <=6.1.2), com.buschmais.jqassistant.cli:jqassistant-commandline-neo4jv5 (>=2.6.0 <=2.8.0) +827 more potentially affected by CVE-2023-44487 via org.eclipse.jetty.http2:jetty-http2-common (>=12.0.0 <=12.0.19)	10 Oct 202321:28	–	vulnersosv
Vulnrichment	CVE-2023-0464 Excessive Resource Usage Verifying X.509 Policy Constraints	22 Mar 202316:36	–	vulnrichment
Vulnrichment	CVE-2023-0465 Invalid certificate policies in leaf certificates are silently ignored	28 Mar 202314:30	–	vulnrichment
Vulnrichment	CVE-2023-0466 Certificate policy check not enabled	28 Mar 202314:30	–	vulnrichment

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

11 Aug 2026 20:33Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.8 - 9.8

EPSS0.99999

SSVC

red hat jboss core services apache http server security update cve-2023-38545 cve-2023-38039 mod_jk openssl libxml2 mod_http2 zlib cvss score