All products

Red Hat JBoss Web Server 6/jws-optional-native-components-win6-x86_64.zip

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
openssl: NULL Dereference in Certificate Verification with OCSP CheckingCVE-2026-42765 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 10/openssl Red Hat Low No fix reported
openssl: CMP indefinite cache growth of ExtraCertsCVE-2026-63074 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: untrusted sender DN used as format string in CMP response validationCVE-2026-63073 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: excessive memory use buffering DTLS records for a future epochCVE-2026-54874 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: RPK server signature algorithm selection can dereference a missing certificateCVE-2026-14457 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: invalid pointer dereference in CMP server via crafted protectionAlgCVE-2026-63076 Red Hat JBoss Core Services/jbcs-httpd24-opensslRed Hat JBoss Core Services/jbcs-openssl-win6-x86_64.zip Red Hat Medium No fix reported
openssl: heap buffer overflow in CMS key unwrappingCVE-2026-63072 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
openssl: QUIC server may trigger double free when processing INITIAL packetCVE-2026-18798 Red Hat JBoss Core Services/jbcs-httpd24-opensslRed Hat JBoss Core Services/jbcs-openssl-win6-x86_64.zip Red Hat Medium No fix reported
openssl: QUIC ACK-only packet retention can cause memory exhaustionCVE-2026-63075 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported