{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Core Services.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.51 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 10, and includes bug fixes and enhancements, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* zlib: A flaw found in zlib when compressing (not decompressing) certain inputs (CVE-2018-25032)\n\n* expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution (CVE-2022-25235)\n\n* expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution (CVE-2022-25236)\n\n* expat: Integer overflow in storeRawNames() (CVE-2022-25315)\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)\n\n* httpd: NULL pointer dereference via crafted request during HTTP/2 request processing (CVE-2021-41524)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\n* expat: Large number of prefixed XML attributes on a single tag can crash libexpat (CVE-2021-45960)\n\n* expat: Integer overflow in doProlog in xmlparse.c (CVE-2021-46143)\n\n* expat: Integer overflow in addBinding in xmlparse.c (CVE-2022-22822)\n\n* expat: Integer overflow in build_model in xmlparse.c (CVE-2022-22823)\n\n* expat: Integer overflow in defineAttribute in xmlparse.c (CVE-2022-22824)\n\n* expat: Integer overflow in lookup in xmlparse.c (CVE-2022-22825)\n\n* expat: Integer overflow in nextScaffoldPart in xmlparse.c (CVE-2022-22826)\n\n* expat: Integer overflow in storeAtts in xmlparse.c (CVE-2022-22827)\n\n* expat: Integer overflow in function XML_GetBuffer (CVE-2022-23852)\n\n* expat: stack exhaustion in doctype parsing (CVE-2022-25313)\n\n* expat: integer overflow in copyString() (CVE-2022-25314)\n\n* expat: integer overflow in the doProlog function (CVE-2022-23990)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:7144",
        "url": "https://access.redhat.com/errata/RHSA-2022:7144"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1966728",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
      },
      {
        "category": "external",
        "summary": "2005119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
      },
      {
        "category": "external",
        "summary": "2005124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
      },
      {
        "category": "external",
        "summary": "2010934",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010934"
      },
      {
        "category": "external",
        "summary": "2034672",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
      },
      {
        "category": "external",
        "summary": "2044451",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044451"
      },
      {
        "category": "external",
        "summary": "2044455",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044455"
      },
      {
        "category": "external",
        "summary": "2044457",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044457"
      },
      {
        "category": "external",
        "summary": "2044464",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044464"
      },
      {
        "category": "external",
        "summary": "2044467",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044467"
      },
      {
        "category": "external",
        "summary": "2044479",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044479"
      },
      {
        "category": "external",
        "summary": "2044484",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044484"
      },
      {
        "category": "external",
        "summary": "2044488",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044488"
      },
      {
        "category": "external",
        "summary": "2044613",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044613"
      },
      {
        "category": "external",
        "summary": "2048356",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048356"
      },
      {
        "category": "external",
        "summary": "2056350",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056350"
      },
      {
        "category": "external",
        "summary": "2056354",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056354"
      },
      {
        "category": "external",
        "summary": "2056363",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056363"
      },
      {
        "category": "external",
        "summary": "2056366",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056366"
      },
      {
        "category": "external",
        "summary": "2056370",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056370"
      },
      {
        "category": "external",
        "summary": "2067945",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067945"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7144.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update",
    "tracking": {
      "current_release_date": "2024-11-22T18:32:37+00:00",
      "generator": {
        "date": "2024-11-22T18:32:37+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:7144",
      "initial_release_date": "2022-10-26T20:05:57+00:00",
      "revision_history": [
        {
          "date": "2022-10-26T20:05:57+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-11-07T10:20:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T18:32:37+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services 1",
                "product": {
                  "name": "Red Hat JBoss Core Services 1",
                  "product_id": "Red Hat JBoss Core Services 1",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-25032",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2022-03-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2067945"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating (ex: when compressing) if the input has many distant matches. For some rare inputs with a large number of distant matches (crafted payloads), the buffer into which the compressed or deflated data is written can overwrite the distance symbol table which it overlays. This issue results in corrupted output due to invalid distances, which leads to out-of-bound access, corrupting the memory and potentially crashing the application.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "zlib: A flaw found in zlib when compressing (not decompressing) certain inputs",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This bug was introduced in zlib v1.2.2.2 through zlib v1.2.11, with the addition of the Z_FIXED option, which forces the use of fixed Huffman codes, rather than dynamic Huffman codes, allowing for a simpler decoder for special applications.\n\nThis bug is difficult to trigger, as Z_FIXED is usually only used in special circumstances.\n\nRsync does the compression in-transit using zlib. As rsync uses vulnerable zlib v1.2.8 package, which incorrectly handles memory when performing certain zlib compressing or deflating operations. This results in rsync to crash.\n\nNote - The issue wasn\u0027t publicly labelled as security vulnerability until 2022, but the fix was public since 2018.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-25032"
        },
        {
          "category": "external",
          "summary": "RHBZ#2067945",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2067945"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-25032",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-25032"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-25032",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-25032"
        }
      ],
      "release_date": "2018-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "zlib: A flaw found in zlib when compressing (not decompressing) certain inputs"
    },
    {
      "cve": "CVE-2021-33193",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966728"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference was found in Apache httpd mod_h2. The highest threat from this flaw is to system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Request splitting via HTTP/2 method injection and mod_proxy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966728",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://portswigger.net/research/http2",
          "url": "https://portswigger.net/research/http2"
        }
      ],
      "release_date": "2021-08-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by disabling HTTP/2. More information available at: https://httpd.apache.org/docs/2.4/mod/mod_http2.html",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Request splitting via HTTP/2 method injection and mod_proxy"
    },
    {
      "cve": "CVE-2021-36160",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-36160",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path"
    },
    {
      "cve": "CVE-2021-39275",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write in function ap_escape_quotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No httpd module in Red Hat Enterprise Linux and Red Hat Software Collections pass untrusted data to ap_escape_quotes function, thus the Impact of the flaw has been set to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39275",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input"
    },
    {
      "cve": "CVE-2021-41524",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-10-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2010934"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: NULL pointer dereference via crafted request during HTTP/2 request processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue only affects Apache HTTP Server 2.4.49 and Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9, earlier versions are not affected. Therefore this issue does not affect the other versions of Apache HTTP Server shipped with Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "RHBZ#2010934",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010934"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-41524",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41524",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: NULL pointer dereference via crafted request during HTTP/2 request processing"
    },
    {
      "cve": "CVE-2021-44224",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034672"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a null pointer dereference and server-side request forgery flaw in httpd\u0027s mod_proxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix Domain Socket requests. In the worst case, this could cause a denial of service or compromise to confidentiality of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: possible NULL dereference or SSRF in forward proxy configurations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect httpd configurations that do not use forward proxy functionality (configurations where ProxyRequests is turned off).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034672",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-44224",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: possible NULL dereference or SSRF in forward proxy configurations"
    },
    {
      "cve": "CVE-2021-45960",
      "cwe": {
        "id": "CWE-130",
        "name": "Improper Handling of Length Parameter Inconsistency"
      },
      "discovery_date": "2022-01-17T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044451"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Large number of prefixed XML attributes on a single tag can crash libexpat",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-45960"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044451",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044451"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-45960",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-45960"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-45960",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45960"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/issues/531",
          "url": "https://github.com/libexpat/libexpat/issues/531"
        }
      ],
      "release_date": "2022-01-17T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Large number of prefixed XML attributes on a single tag can crash libexpat"
    },
    {
      "cve": "CVE-2021-46143",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044455"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in doProlog in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-46143"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044455",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044455"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-46143",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-46143"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-46143",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46143"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/issues/532",
          "url": "https://github.com/libexpat/libexpat/issues/532"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in doProlog in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22822",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044457"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in addBinding in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22822"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044457",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044457"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22822",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22822"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22822",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22822"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in addBinding in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22823",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044464"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in build_model in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22823"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044464",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044464"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22823",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22823"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22823",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22823"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in build_model in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22824",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044467"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in defineAttribute in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22824"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044467",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044467"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22824",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22824"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22824",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22824"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in defineAttribute in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22825",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044479"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in lookup in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22825"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044479",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044479"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22825",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22825"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22825",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22825"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in lookup in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22826",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044484"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in nextScaffoldPart in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22826"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044484",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044484"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22826",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22826"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22826",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22826"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in nextScaffoldPart in xmlparse.c"
    },
    {
      "cve": "CVE-2022-22827",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044488"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in storeAtts in xmlparse.c",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22827"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044488",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044488"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22827",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22827"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22827",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22827"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/539",
          "url": "https://github.com/libexpat/libexpat/pull/539"
        }
      ],
      "release_date": "2022-01-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in storeAtts in xmlparse.c"
    },
    {
      "cve": "CVE-2022-23852",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2044613"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "expat (libexpat) is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to integer overflow. The highest threat from this vulnerability is to availability, confidentiality and integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in function XML_GetBuffer",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2044613",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2044613"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23852"
        },
        {
          "category": "external",
          "summary": "https://github.com/libexpat/libexpat/pull/550",
          "url": "https://github.com/libexpat/libexpat/pull/550"
        }
      ],
      "release_date": "2022-01-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in function XML_GetBuffer"
    },
    {
      "cve": "CVE-2022-23990",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2048356"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in expat. The vulnerability occurs due to large content in element type declarations when there is an element declaration handler present which leads to an integer overflow. This flaw allows an attacker to inject an unsigned integer, leading to a crash or a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: integer overflow in the doProlog function",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security marked this flaw as Moderate Impact because the vulnerability includes a flaw that is present in a program\u2019s source code but to which no current or theoretically possible, but unproven, exploitation vectors exist or were found during the technical analysis of the flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23990"
        },
        {
          "category": "external",
          "summary": "RHBZ#2048356",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048356"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23990",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23990"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23990",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23990"
        }
      ],
      "release_date": "2022-01-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: integer overflow in the doProlog function"
    },
    {
      "cve": "CVE-2022-25235",
      "cwe": {
        "id": "CWE-838",
        "name": "Inappropriate Encoding for Output Context"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056366"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) to the XML processing application on top of expat can lead to arbitrary code execution. This issue is dependent on how invalid UTF-8 is handled inside the XML processor.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects applications that leverage expat to parse untrusted XML files. Applications that only parse trusted XML files or do not process XML files at all are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25235"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056366",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056366"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25235",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25235"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25235",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25235"
        },
        {
          "category": "external",
          "summary": "https://blog.hartwork.org/posts/expat-2-4-5-released/",
          "url": "https://blog.hartwork.org/posts/expat-2-4-5-released/"
        }
      ],
      "release_date": "2022-02-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content. Please update the affected packages as soon as possible.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-25236",
      "cwe": {
        "id": "CWE-179",
        "name": "Incorrect Behavior Order: Early Validation"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056370"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in expat. Passing one or more namespace separator characters in the \"xmlns[:prefix]\" attribute values made expat send malformed tag names to the XML processor on top of expat. This issue causes arbitrary code execution depending on how unexpected cases are handled inside the XML processor.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects applications that leverage expat to parse untrusted XML files. Applications that only parse trusted XML files or do not process XML files at all are not affected by this flaw.\n\nThe xmlrpc-c component as shipped with Red Hat Enterprise Linux 8 is not affected by this issue as the issue could not be reproduced in this version.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25236"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056370",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056370"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25236",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25236"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25236",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25236"
        },
        {
          "category": "external",
          "summary": "https://blog.hartwork.org/posts/expat-2-4-5-released/",
          "url": "https://blog.hartwork.org/posts/expat-2-4-5-released/"
        }
      ],
      "release_date": "2022-02-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content. Please update the affected packages as soon as possible.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "expat: Namespace-separator characters in \"xmlns[:prefix]\" attribute values can lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-25313",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056350"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in expat. A stack exhaustion in doctype parsing could be triggered by a file with a large number of opening braces, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Stack exhaustion in doctype parsing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects applications that leverage expat to parse untrusted XML files. Applications which only parse trusted XML files or do not process XML files at all are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056350",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056350"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25313"
        },
        {
          "category": "external",
          "summary": "https://blog.hartwork.org/posts/expat-2-4-5-released/",
          "url": "https://blog.hartwork.org/posts/expat-2-4-5-released/"
        }
      ],
      "release_date": "2022-02-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Stack exhaustion in doctype parsing"
    },
    {
      "cve": "CVE-2022-25314",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056354"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow flaw was found in expat. This issue affects the encoding name parameter at the parser creation time, which is often hard-coded (rather than user input), takes a value in the gigabytes to trigger, and on a 64-bit machine. This flaw can cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in copyString()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has been rated as having a severity of Moderate. The encoding name parameter is often hard-coded (rather than user input) and it would take a value in the gigabytes for the name to trigger this issue. The versions of `expat` as shipped with Red Hat Enterprise Linux 6 and 7 are not affected by this flaw as they did not include the vulnerable copyString() function.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25314"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056354",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056354"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25314",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25314"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25314",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25314"
        },
        {
          "category": "external",
          "summary": "https://blog.hartwork.org/posts/expat-2-4-5-released/",
          "url": "https://blog.hartwork.org/posts/expat-2-4-5-released/"
        }
      ],
      "release_date": "2022-02-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "expat: Integer overflow in copyString()"
    },
    {
      "cve": "CVE-2022-25315",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-02-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2056363"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow was found in expat. The issue occurs in storeRawNames() by abusing the m_buffer expansion logic to allow allocations very close to INT_MAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "expat: Integer overflow in storeRawNames()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw affects applications that leverage expat to parse untrusted XML files. Applications that only parse trusted XML files or do not process XML files at all are not affected by this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Core Services 1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-25315"
        },
        {
          "category": "external",
          "summary": "RHBZ#2056363",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2056363"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-25315",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-25315"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-25315",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-25315"
        },
        {
          "category": "external",
          "summary": "https://blog.hartwork.org/posts/expat-2-4-5-released/",
          "url": "https://blog.hartwork.org/posts/expat-2-4-5-released/"
        }
      ],
      "release_date": "2022-02-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:05:57+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7144"
        },
        {
          "category": "workaround",
          "details": "There is no known mitigation other than restricting applications using the expat library from processing untrusted XML content. Please update the affected packages as soon as possible.",
          "product_ids": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Core Services 1"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "expat: Integer overflow in storeRawNames()"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\n* httpd: Single zero byte stack overflow in mod_auth_digest (CVE-2020-35452)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:1915",
        "url": "https://access.redhat.com/errata/RHSA-2022:1915"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/"
      },
      {
        "category": "external",
        "summary": "1966724",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966724"
      },
      {
        "category": "external",
        "summary": "1966728",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
      },
      {
        "category": "external",
        "summary": "1984828",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1984828"
      },
      {
        "category": "external",
        "summary": "2001046",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2001046"
      },
      {
        "category": "external",
        "summary": "2005124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
      },
      {
        "category": "external",
        "summary": "2034672",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1915.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd:2.4 security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-22T17:34:18+00:00",
      "generator": {
        "date": "2024-11-22T17:34:18+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:1915",
      "initial_release_date": "2022-05-10T14:18:41+00:00",
      "revision_history": [
        {
          "date": "2022-05-10T14:18:41+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-05-10T14:18:41+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T17:34:18+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.6.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd:2.4:8060020220321163517:d63f516d",
                "product": {
                  "name": "httpd:2.4:8060020220321163517:d63f516d",
                  "product_id": "httpd:2.4:8060020220321163517:d63f516d",
                  "product_identification_helper": {
                    "purl": "pkg:rpmmod/redhat/httpd@2.4:8060020220321163517:d63f516d"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                "product": {
                  "name": "httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                  "product_id": "httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-filesystem@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                "product": {
                  "name": "httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                  "product_id": "httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-manual@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_id": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=aarch64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
                "product": {
                  "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
                  "product_id": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_id": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=ppc64le\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_id": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=s390x\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-debugsource@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-devel@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd-tools-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                "product": {
                  "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_id": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                "product": {
                  "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_id": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debuginfo@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                "product": {
                  "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_id": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_http2-debugsource@1.15.7-5.module%2Bel8.6.0%2B13996%2B01710940?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ldap-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                "product": {
                  "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_id": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                "product": {
                  "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_id": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debuginfo@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                "product": {
                  "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_id": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_md-debugsource@2.0.8-8.module%2Bel8.3.0%2B6814%2B67d1e611?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_session-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                "product": {
                  "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_id": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/mod_ssl-debuginfo@2.4.37-47.module%2Bel8.6.0%2B14529%2B083145da.1?arch=x86_64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
        },
        "product_reference": "httpd:2.4:8060020220321163517:d63f516d",
        "relates_to_product_reference": "AppStream-8.6.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src"
        },
        "product_reference": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch"
        },
        "product_reference": "httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch"
        },
        "product_reference": "httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64"
        },
        "product_reference": "mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64"
        },
        "product_reference": "mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64"
        },
        "product_reference": "mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64"
        },
        "product_reference": "mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64"
        },
        "product_reference": "mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64"
        },
        "product_reference": "mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64 as a component of httpd:2.4:8060020220321163517:d63f516d as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        },
        "product_reference": "mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
        "relates_to_product_reference": "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "the Apache project"
          ]
        },
        {
          "names": [
            "Antonio Morales"
          ],
          "organization": "GHSL"
        }
      ],
      "cve": "CVE-2020-35452",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966724"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache httpd. The mod_auth_digest has a single zero byte stack overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Single zero byte stack overflow in mod_auth_digest",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a one byte overflow and as per upstream it should be non-exploitable in most condtions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2020-35452"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966724",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966724"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2020-35452",
          "url": "https://www.cve.org/CVERecord?id=CVE-2020-35452"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-35452",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35452"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-06-04T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T14:18:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1915"
        },
        {
          "category": "workaround",
          "details": "Only configurations which use mod_auth_digest are affected by this flaw. Also as per upstream this flaw is not exploitable in most conditions, so there should really be no impact of this flaw.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: Single zero byte stack overflow in mod_auth_digest"
    },
    {
      "cve": "CVE-2021-33193",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966728"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference was found in Apache httpd mod_h2. The highest threat from this flaw is to system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Request splitting via HTTP/2 method injection and mod_proxy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966728",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://portswigger.net/research/http2",
          "url": "https://portswigger.net/research/http2"
        }
      ],
      "release_date": "2021-08-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T14:18:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1915"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by disabling HTTP/2. More information available at: https://httpd.apache.org/docs/2.4/mod/mod_http2.html",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Request splitting via HTTP/2 method injection and mod_proxy"
    },
    {
      "cve": "CVE-2021-36160",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-36160",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T14:18:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1915"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path"
    },
    {
      "cve": "CVE-2021-44224",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034672"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a null pointer dereference and server-side request forgery flaw in httpd\u0027s mod_proxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix Domain Socket requests. In the worst case, this could cause a denial of service or compromise to confidentiality of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: possible NULL dereference or SSRF in forward proxy configurations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect httpd configurations that do not use forward proxy functionality (configurations where ProxyRequests is turned off).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
          "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034672",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-44224",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-05-10T14:18:41+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:1915"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-debugsource-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-devel-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-filesystem-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-manual-0:2.4.37-47.module+el8.6.0+14529+083145da.1.noarch",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debuginfo-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_http2-debugsource-0:1.15.7-5.module+el8.6.0+13996+01710940.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ldap-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.src",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debuginfo-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_md-debugsource-1:2.0.8-8.module+el8.3.0+6814+67d1e611.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_proxy_html-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_session-debuginfo-0:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.aarch64",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.ppc64le",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.s390x",
            "AppStream-8.6.0.GA:httpd:2.4:8060020220321163517:d63f516d:mod_ssl-debuginfo-1:2.4.37-47.module+el8.6.0+14529+083145da.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: possible NULL dereference or SSRF in forward proxy configurations"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for httpd24-httpd is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\n* httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719)\n\n* httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721)\n\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)\n\n* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)\n\n* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)\n\n* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813)\n\n* httpd: out-of-bounds read via ap_rwrite() (CVE-2022-28614)\n\n* httpd: out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)\n\n* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* proxy rewrite to unix socket fails with CVE-2021-40438 fix (BZ#2022319)\n\nAdditional changes:\n\n* To fix CVE-2022-29404, the default value for the \"LimitRequestBody\" directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1 GiB. \n\nOn systems where the value of \"LimitRequestBody\" is not explicitly specified in an httpd configuration file, updating the httpd package sets \"LimitRequestBody\" to the default value of 1 GiB. As a consequence, if the total size of the HTTP request body exceeds this 1 GiB default limit, httpd returns the 413 Request Entity Too Large error code.\n\nIf the new default allowed size of an HTTP request message body is insufficient for your use case, update your httpd configuration files within the respective context (server, per-directory, per-file, or per-location) and set your preferred limit in bytes. For example, to set a new 2 GiB limit, use:\n\nLimitRequestBody 2147483648\n\nSystems already configured to use any explicit value for the \"LimitRequestBody\" directive are unaffected by this change.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:6753",
        "url": "https://access.redhat.com/errata/RHSA-2022:6753"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/articles/6975397",
        "url": "https://access.redhat.com/articles/6975397"
      },
      {
        "category": "external",
        "summary": "1966728",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
      },
      {
        "category": "external",
        "summary": "2005119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
      },
      {
        "category": "external",
        "summary": "2005124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
      },
      {
        "category": "external",
        "summary": "2005128",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005128"
      },
      {
        "category": "external",
        "summary": "2034672",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
      },
      {
        "category": "external",
        "summary": "2064319",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064319"
      },
      {
        "category": "external",
        "summary": "2064320",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064320"
      },
      {
        "category": "external",
        "summary": "2064322",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064322"
      },
      {
        "category": "external",
        "summary": "2094997",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2094997"
      },
      {
        "category": "external",
        "summary": "2095002",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095002"
      },
      {
        "category": "external",
        "summary": "2095006",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095006"
      },
      {
        "category": "external",
        "summary": "2095012",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095012"
      },
      {
        "category": "external",
        "summary": "2095015",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095015"
      },
      {
        "category": "external",
        "summary": "2095018",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095018"
      },
      {
        "category": "external",
        "summary": "2095020",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095020"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6753.json"
      }
    ],
    "title": "Red Hat Security Advisory: httpd24-httpd security and bug fix update",
    "tracking": {
      "current_release_date": "2024-11-15T14:57:02+00:00",
      "generator": {
        "date": "2024-11-15T14:57:02+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:6753",
      "initial_release_date": "2022-09-29T13:33:06+00:00",
      "revision_history": [
        {
          "date": "2022-09-29T13:33:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2022-09-29T13:33:06+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T14:57:02+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for RHEL Workstation(v. 7)",
                  "product_id": "7Server-RHSCL-3.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Software Collections for RHEL(v. 7)",
                "product": {
                  "name": "Red Hat Software Collections for RHEL(v. 7)",
                  "product_id": "7Workstation-RHSCL-3.8",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Software Collections"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-23.el7.5.src",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-23.el7.5.src",
                  "product_id": "httpd24-httpd-0:2.4.34-23.el7.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7.5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-23.el7.5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-23.el7.5?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-23.el7.5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
                "product": {
                  "name": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
                  "product_id": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-manual@2.4.34-23.el7.5?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-httpd-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-23.el7.5?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-23.el7.5?arch=s390x\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-23.el7.5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-devel@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-tools@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ldap@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html@2.4.34-23.el7.5?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_session@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-mod_ssl@2.4.34-23.el7.5?arch=ppc64le\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
                "product": {
                  "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
                  "product_id": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/httpd24-httpd-debuginfo@2.4.34-23.el7.5?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.src",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)",
          "product_id": "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Server-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.src as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.src",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch"
        },
        "product_reference": "httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)",
          "product_id": "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        },
        "product_reference": "httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
        "relates_to_product_reference": "7Workstation-RHSCL-3.8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-33193",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966728"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference was found in Apache httpd mod_h2. The highest threat from this flaw is to system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Request splitting via HTTP/2 method injection and mod_proxy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966728",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://portswigger.net/research/http2",
          "url": "https://portswigger.net/research/http2"
        }
      ],
      "release_date": "2021-08-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by disabling HTTP/2. More information available at: https://httpd.apache.org/docs/2.4/mod/mod_http2.html",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Request splitting via HTTP/2 method injection and mod_proxy"
    },
    {
      "cve": "CVE-2021-34798",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005128"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference in httpd allows an unauthenticated remote attacker to crash httpd by providing malformed HTTP requests. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: NULL pointer dereference via malformed requests",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-34798"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005128",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005128"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-34798",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-34798"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-34798",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34798"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: NULL pointer dereference via malformed requests"
    },
    {
      "cve": "CVE-2021-36160",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-36160",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path"
    },
    {
      "cve": "CVE-2021-39275",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write in function ap_escape_quotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No httpd module in Red Hat Enterprise Linux and Red Hat Software Collections pass untrusted data to ap_escape_quotes function, thus the Impact of the flaw has been set to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39275",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input"
    },
    {
      "cve": "CVE-2021-44224",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034672"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a null pointer dereference and server-side request forgery flaw in httpd\u0027s mod_proxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix Domain Socket requests. In the worst case, this could cause a denial of service or compromise to confidentiality of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: possible NULL dereference or SSRF in forward proxy configurations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect httpd configurations that do not use forward proxy functionality (configurations where ProxyRequests is turned off).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034672",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-44224",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: possible NULL dereference or SSRF in forward proxy configurations"
    },
    {
      "cve": "CVE-2022-22719",
      "cwe": {
        "id": "CWE-908",
        "name": "Use of Uninitialized Resource"
      },
      "discovery_date": "2022-03-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2064322"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_lua module of httpd. A crafted request body can cause a read to a random memory area due to an uninitialized value in functions called by the parsebody function. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_lua: Use of uninitialized value of in r:parsebody",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "httpd as shipped with Red Hat Enterprise Linux 6, is not affected by this flaw because it does not ship mod_lua.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22719"
        },
        {
          "category": "external",
          "summary": "RHBZ#2064322",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064322"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22719",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22719"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22719",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22719"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22719",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22719"
        }
      ],
      "release_date": "2022-03-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_lua and restarting httpd will mitigate this flaw. See https://access.redhat.com/articles/10649 for more information.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_lua: Use of uninitialized value of in r:parsebody"
    },
    {
      "cve": "CVE-2022-22721",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-03-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2064320"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The default configuration of the LimitXMLRequestBody option on RHEL is 1MB and therefore is not vulnerable to this flaw. Also, this issue is known to only affect 32bit httpd builds.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-22721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2064320",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064320"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-22721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-22721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-22721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22721"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22721",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22721"
        }
      ],
      "release_date": "2022-03-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Set the LimitXMLRequestBody option to a value smaller than 350MB. Setting it to 0 is not recommended as it will use a hard limit (depending on 32bit or 64bit systems) which may result in an overall system out-of-memory. The default configuration is not vulnerable to this flaw, see the statement above.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody"
    },
    {
      "cve": "CVE-2022-23943",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-03-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2064319"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read/write vulnerability was found in the mod_sed module of httpd. This flaw allows an attacker to overwrite the memory of an httpd instance that is using mod_sed with data provided by the attacker.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_sed: Read/write beyond bounds",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The `mod_sed` module is disabled by default on Red Hat Enterprise Linux 7 and 8. For this reason, the flaw has been rated as having a security impact of Moderate. The httpd package as shipped with Red Hat Enterprise Linux 6 is not affected by this flaw because the `mod_sed` module is available only in httpd 2.3 and later.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-23943"
        },
        {
          "category": "external",
          "summary": "RHBZ#2064319",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2064319"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-23943",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-23943"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-23943",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-23943"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-23943",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-23943"
        }
      ],
      "release_date": "2022-03-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_sed and restarting httpd will mitigate this flaw. See https://access.redhat.com/articles/10649 for more information.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_sed: Read/write beyond bounds"
    },
    {
      "cve": "CVE-2022-26377",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2094997"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An HTTP request smuggling vulnerability was found in the mod_proxy_ajp module of httpd. This flaw allows an attacker to smuggle requests to the AJP server, where it forwards requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_ajp: Possible request smuggling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The httpd mod_proxy_ajp module is enabled by default on Red Hat Enterprise Linux 8, 9, and in RHSCL. However, there are no directives forwarding requests using the AJP protocol.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-26377"
        },
        {
          "category": "external",
          "summary": "RHBZ#2094997",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2094997"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-26377",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-26377"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-26377",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-26377"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-26377",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-26377"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_proxy_ajp and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_ajp: Possible request smuggling"
    },
    {
      "cve": "CVE-2022-28614",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095002"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability was found in httpd. A very large input to the ap_rputs and ap_rwrite functions can lead to an integer overflow and result in an out-of-bounds read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Out-of-bounds read via ap_rwrite()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-28614"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095002",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095002"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-28614",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-28614"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28614",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28614"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28614",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28614"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: Out-of-bounds read via ap_rwrite()"
    },
    {
      "cve": "CVE-2022-28615",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read vulnerability was found in httpd. A very large input to the ap_strcmp_match function can lead to an integer overflow and result in an out-of-bounds read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Out-of-bounds read in ap_strcmp_match()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "According to upstream, no code distributed with the httpd server can exploit this flaw, however, third-party modules or Lua scripts that use the ap_strcmp_match function could potentially be affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-28615"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-28615",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-28615"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-28615",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-28615"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28615",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28615"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: Out-of-bounds read in ap_strcmp_match()"
    },
    {
      "cve": "CVE-2022-29404",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095012"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_lua module of httpd. A malicious request to a Lua script that calls parsebody(0) can lead to a denial of service due to no default limit on the possible input size.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_lua: DoS in r:parsebody",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "httpd as shipped with Red Hat Enterprise Linux 6, is not affected by this flaw because it does not ship mod_lua.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-29404"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095012",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095012"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-29404",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-29404"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-29404",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-29404"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-29404",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-29404"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_lua and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_lua: DoS in r:parsebody"
    },
    {
      "cve": "CVE-2022-30522",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095015"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_sed module of httpd. A very large input to the mod_sed module can result in a denial of service due to excessively large memory allocations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_sed: DoS vulnerability",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The mod_sed module is disabled by default on Red Hat Enterprise Linux 7 and 8. The httpd package as shipped with Red Hat Enterprise Linux 6 is not affected by this flaw because the mod_sed module is not available.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-30522"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095015",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095015"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30522",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-30522"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30522",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30522"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30522",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30522"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_sed and restating httpd will mitigate this flaw.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_sed: DoS vulnerability"
    },
    {
      "cve": "CVE-2022-30556",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095018"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_lua module of httpd. The data returned by the wsread function may point past the end of the storage allocated for the buffer, resulting in information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_lua: Information disclosure with websockets",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "httpd as shipped with Red Hat Enterprise Linux 6, is not affected by this flaw because it does not ship mod_lua. Red Hat Enterprise Linux 7 is not affected by this flaw because the wsread function is not available.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-30556"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095018",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095018"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-30556",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-30556"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-30556",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-30556"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30556",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30556"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Disabling mod_lua and restarting httpd will mitigate this flaw.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "httpd: mod_lua: Information disclosure with websockets"
    },
    {
      "cve": "CVE-2022-31813",
      "cwe": {
        "id": "CWE-348",
        "name": "Use of Less Trusted Source"
      },
      "discovery_date": "2022-06-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2095020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the mod_proxy module of httpd. The server may remove the X-Forwarded-* headers from a request based on the client-side Connection header hop-by-hop mechanism.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw has been rated as having a security impact of Moderate, and is not currently planned to be addressed in future updates of Red Hat Enterprise Linux 7. Red Hat Enterprise Linux 7 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
          "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
          "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-31813"
        },
        {
          "category": "external",
          "summary": "RHBZ#2095020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-31813",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-31813"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-31813",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31813"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-31813",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-31813"
        }
      ],
      "release_date": "2022-06-08T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-09-29T13:33:06+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:6753"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Server-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Server-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.src",
            "7Workstation-RHSCL-3.8:httpd24-httpd-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-debuginfo-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-devel-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-httpd-manual-0:2.4.34-23.el7.5.noarch",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-httpd-tools-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ldap-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_proxy_html-1:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_session-0:2.4.34-23.el7.5.x86_64",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.ppc64le",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.s390x",
            "7Workstation-RHSCL-3.8:httpd24-mod_ssl-1:2.4.34-23.el7.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update is now available for Red Hat JBoss Core Services.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products and packaged under Red Hat JBoss Core Services, to allow for faster distribution of updates and for a more consistent update experience.\n\nThis release of Red Hat JBoss Core Services Apache HTTP Server 2.4.51 serves as a replacement for Red Hat JBoss Core Services Apache HTTP Server 2.4.37 Service Pack 10, and includes bug fixes and enhancements, which are documented in the Release Notes linked to in the References section.\n\nSecurity Fix(es):\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)\n\n* httpd: NULL pointer dereference via crafted request during HTTP/2 request processing (CVE-2021-41524)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2022:7143",
        "url": "https://access.redhat.com/errata/RHSA-2022:7143"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.51/html-single/red_hat_jboss_core_services_apache_http_server_2.4.51_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.51/html-single/red_hat_jboss_core_services_apache_http_server_2.4.51_release_notes/index"
      },
      {
        "category": "external",
        "summary": "1966728",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
      },
      {
        "category": "external",
        "summary": "2005119",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
      },
      {
        "category": "external",
        "summary": "2005124",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
      },
      {
        "category": "external",
        "summary": "2010934",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010934"
      },
      {
        "category": "external",
        "summary": "2034672",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7143.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update",
    "tracking": {
      "current_release_date": "2024-11-22T18:32:46+00:00",
      "generator": {
        "date": "2024-11-22T18:32:46+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2022:7143",
      "initial_release_date": "2022-10-26T20:15:34+00:00",
      "revision_history": [
        {
          "date": "2022-10-26T20:15:34+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-05-17T11:42:27+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T18:32:46+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 7 Server",
                  "product_id": "7Server-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat JBoss Core Services on RHEL 8",
                "product": {
                  "name": "Red Hat JBoss Core Services on RHEL 8",
                  "product_id": "8Base-JBCS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_core_services:1::el8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Core Services"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.9-2.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.14-1.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
                  "product_id": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.7.0-6.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1k-12.el7jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-16.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-31.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-10.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.51-28.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-19.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.0-15.el7jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-17.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
                  "product_id": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.83.1-6.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-98.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.17-9.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-41.redhat_1.el7jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.9-2.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
                  "product_id": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.14-1.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
                  "product_id": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.7.0-6.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1k-12.el8jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-31.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
                  "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-16.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-10.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.51-28.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-17.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.0-15.el8jbcs?arch=src\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-19.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
                  "product_id": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.83.1-6.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-98.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.17-9.el8jbcs?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
                  "product_id": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-41.redhat_1.el8jbcs?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.9-2.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.9-2.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.9-2.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.14-1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.14-1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.14-1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.7.0-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.7.0-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.7.0-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1k-12.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-16.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-16.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-31.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-31.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.43.0-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.43.0-10.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.51-28.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.51-28.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.51-28.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-19.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-19.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.0-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.0-15.el7jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-17.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-17.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.83.1-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.83.1-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.83.1-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.83.1-6.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-98.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.17-9.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.17-9.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-41.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-41.redhat_1.el7jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.9-2.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.9-2.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.9-2.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson@2.14-1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-devel@2.14-1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-jansson-debuginfo@2.14-1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr@1.7.0-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-devel@1.7.0-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-debuginfo@1.7.0-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs-debuginfo@1.1.1k-12.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-31.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-31.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-16.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-16.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.43.0-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.43.0-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.43.0-10.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.51-28.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.51-28.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo@2.4.51-28.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo@2.4.51-28.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo@2.4.51-28.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.19-17.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.19-17.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.4.0-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.4.0-15.el8jbcs?arch=x86_64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.3-19.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.3-19.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl@7.83.1-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl@7.83.1-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-devel@7.83.1-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo@7.83.1-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-libcurl-debuginfo@7.83.1-6.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-devel@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-ldap-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-mysql-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-nss-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-odbc-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-openssl-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-pgsql-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-apr-util-sqlite-debuginfo@1.6.1-98.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster@1.3.17-9.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo@1.3.17-9.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-41.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                "product": {
                  "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                  "product_id": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo@1.2.48-41.redhat_1.el8jbcs?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.51-28.el7jbcs?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
                "product": {
                  "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
                  "product_id": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.51-28.el8jbcs?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server",
          "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
        "relates_to_product_reference": "7Server-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch"
        },
        "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 8",
          "product_id": "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        },
        "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64",
        "relates_to_product_reference": "8Base-JBCS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-33193",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-05-27T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1966728"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A NULL pointer dereference was found in Apache httpd mod_h2. The highest threat from this flaw is to system integrity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Request splitting via HTTP/2 method injection and mod_proxy",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "RHBZ#1966728",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1966728"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33193",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33193"
        },
        {
          "category": "external",
          "summary": "https://portswigger.net/research/http2",
          "url": "https://portswigger.net/research/http2"
        }
      ],
      "release_date": "2021-08-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:15:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications using the APR libraries, such as httpd, must be restarted for this update to take effect. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7143"
        },
        {
          "category": "workaround",
          "details": "This flaw can be mitigated by disabling HTTP/2. More information available at: https://httpd.apache.org/docs/2.4/mod/mod_http2.html",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Request splitting via HTTP/2 method injection and mod_proxy"
    },
    {
      "cve": "CVE-2021-36160",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005124"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005124",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005124"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-36160",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-36160"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:15:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications using the APR libraries, such as httpd, must be restarted for this update to take effect. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7143"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path"
    },
    {
      "cve": "CVE-2021-39275",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2021-09-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2005119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write in function ap_escape_quotes of httpd allows an unauthenticated remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing malicious input to the function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "No httpd module in Red Hat Enterprise Linux and Red Hat Software Collections pass untrusted data to ap_escape_quotes function, thus the Impact of the flaw has been set to Moderate.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "RHBZ#2005119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2005119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-39275",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-39275"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-39275"
        }
      ],
      "release_date": "2021-09-16T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:15:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications using the APR libraries, such as httpd, must be restarted for this update to take effect. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7143"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: Out-of-bounds write in ap_escape_quotes() via malicious input"
    },
    {
      "cve": "CVE-2021-41524",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2021-10-05T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2010934"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: NULL pointer dereference via crafted request during HTTP/2 request processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue only affects Apache HTTP Server 2.4.49 and Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9, earlier versions are not affected. Therefore this issue does not affect the other versions of Apache HTTP Server shipped with Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "RHBZ#2010934",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2010934"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-41524",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-41524",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41524"
        },
        {
          "category": "external",
          "summary": "https://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-10-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:15:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications using the APR libraries, such as httpd, must be restarted for this update to take effect. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7143"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: NULL pointer dereference via crafted request during HTTP/2 request processing"
    },
    {
      "cve": "CVE-2021-44224",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2021-12-20T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2034672"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a null pointer dereference and server-side request forgery flaw in httpd\u0027s mod_proxy module, when it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix Domain Socket requests. In the worst case, this could cause a denial of service or compromise to confidentiality of data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "httpd: possible NULL dereference or SSRF in forward proxy configurations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw does not affect httpd configurations that do not use forward proxy functionality (configurations where ProxyRequests is turned off).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
          "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
          "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
        ],
        "known_not_affected": [
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
          "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
          "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "RHBZ#2034672",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034672"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2021-44224",
          "url": "https://www.cve.org/CVERecord?id=CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-44224"
        },
        {
          "category": "external",
          "summary": "http://httpd.apache.org/security/vulnerabilities_24.html",
          "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
        }
      ],
      "release_date": "2021-12-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2022-10-26T20:15:34+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nApplications using the APR libraries, such as httpd, must be restarted for this update to take effect. After installing the updated packages, the httpd daemon will be restarted automatically.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2022:7143"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-jansson-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-41.redhat_1.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-debuginfo-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-devel-0:1.7.0-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-apr-util-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-devel-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-ldap-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-mysql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-nss-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-odbc-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-openssl-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-pgsql-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-apr-util-sqlite-debuginfo-0:1.6.1-98.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-brotli-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-brotli-devel-0:1.0.9-2.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-curl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-curl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-jansson-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-debuginfo-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-jansson-devel-0:2.14-1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-debuginfo-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-libcurl-devel-0:7.83.1-6.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_http2-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.19-17.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-41.redhat_1.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_jk-ap24-debuginfo-0:1.2.48-41.redhat_1.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_md-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.4.0-15.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_cluster-debuginfo-0:1.3.17-9.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-mod_security-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.3-19.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-nghttp2-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-nghttp2-devel-0:1.43.0-10.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-16.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-libs-debuginfo-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1k-12.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-31.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-openssl-static-1:1.1.1k-12.el8jbcs.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.src",
            "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el7jbcs.noarch",
            "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el7jbcs.x86_64",
            "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el7jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.src",
            "8Base-JBCS:jbcs-httpd24-httpd-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-devel-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-manual-0:2.4.51-28.el8jbcs.noarch",
            "8Base-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-httpd-tools-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ldap-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_proxy_html-debuginfo-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_session-debuginfo-0:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-1:2.4.51-28.el8jbcs.x86_64",
            "8Base-JBCS:jbcs-httpd24-mod_ssl-debuginfo-1:2.4.51-28.el8jbcs.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "httpd: possible NULL dereference or SSRF in forward proxy configurations"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2021-36160",
    "description": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).",
    "id": "GSD-2021-36160",
    "references": [
      "https://www.suse.com/security/cve/CVE-2021-36160.html",
      "https://www.debian.org/security/2021/dsa-4982",
      "https://ubuntu.com/security/CVE-2021-36160",
      "https://advisories.mageia.org/CVE-2021-36160.html",
      "https://security.archlinux.org/CVE-2021-36160",
      "https://alas.aws.amazon.com/cve/html/CVE-2021-36160.html",
      "https://linux.oracle.com/cve/CVE-2021-36160.html",
      "https://access.redhat.com/errata/RHSA-2022:1915",
      "https://access.redhat.com/errata/RHSA-2022:6753",
      "https://access.redhat.com/errata/RHSA-2022:7143",
      "https://access.redhat.com/errata/RHSA-2022:7144"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-36160"
      ],
      "details": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).",
      "id": "GSD-2021-36160",
      "modified": "2023-12-13T01:23:16.510285Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@apache.org",
        "ID": "CVE-2021-36160",
        "STATE": "PUBLIC",
        "TITLE": "mod_proxy_uwsgi out of bound read"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Apache HTTP Server",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c=",
                          "version_name": "Apache HTTP Server 2.4",
                          "version_value": "2.4.48"
                        },
                        {
                          "version_affected": "!\u003c",
                          "version_name": "Apache HTTP Server 2.4",
                          "version_value": "2.4.30"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apache Software Foundation"
            }
          ]
        }
      },
      "credit": [
        {
          "lang": "eng",
          "value": "LI ZHI XIN from NSFocus Security Team"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive)."
          }
        ]
      },
      "generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "impact": [
        {
          "other": "moderate"
        }
      ],
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-125 out of bound read"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://httpd.apache.org/security/vulnerabilities_24.html",
            "refsource": "MISC",
            "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
          },
          {
            "name": "[httpd-cvs] 20210916 [httpd-site] branch main updated: Revert \"Add descriptions for CVE-2021-33193 CVE-2021-36160\"",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-cvs] 20210916 [httpd-site] branch main updated: Add descriptions for CVE-2021-33193 CVE-2021-36160",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70@%3Ccvs.httpd.apache.org%3E"
          },
          {
            "name": "FEDORA-2021-dce7e7738e",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
          },
          {
            "name": "[httpd-users] 20210923 [users@httpd] 2.4.49 security fixes: more info",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-users] 20210923 Re: [users@httpd] 2.4.49 security fixes: more info",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-users] 20210923 [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-users] 20210923 Re: [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E"
          },
          {
            "name": "FEDORA-2021-e3f6dd670d",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
          },
          {
            "name": "[debian-lts-announce] 20210929 [SECURITY] [DLA 2768-1] uwsgi security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
          },
          {
            "name": "[httpd-bugs] 20211005 [Bug 65616] New: CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-bugs] 20211005 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-bugs] 20211006 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-bugs] 20211008 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-bugs] 20211009 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "DSA-4982",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2021/dsa-4982"
          },
          {
            "name": "[httpd-bugs] 20211011 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[httpd-bugs] 20211012 [Bug 65616] CVE-2021-36160 regression",
            "refsource": "MLIST",
            "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a@%3Cbugs.httpd.apache.org%3E"
          },
          {
            "name": "[debian-lts-announce] 20211020 [SECURITY] [DLA 2768-2] uwsgi regression update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00016.html"
          },
          {
            "name": "20211124 Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021",
            "refsource": "CISCO",
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpujan2022.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20211008-0004/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20211008-0004/"
          },
          {
            "name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
            "refsource": "MISC",
            "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
          },
          {
            "name": "GLSA-202208-20",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/202208-20"
          }
        ]
      },
      "source": {
        "discovery": "UNKNOWN"
      },
      "timeline": [
        {
          "lang": "eng",
          "time": "2021-04-26",
          "value": "reported"
        },
        {
          "lang": "eng",
          "time": "2021-09-16",
          "value": "2.4.49 release"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.4.48",
                "versionStartIncluding": "2.4.30",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "ID": "CVE-2021-36160"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-125"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://httpd.apache.org/security/vulnerabilities_24.html",
              "refsource": "MISC",
              "tags": [
                "Release Notes",
                "Vendor Advisory"
              ],
              "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
            },
            {
              "name": "[httpd-cvs] 20210916 [httpd-site] branch main updated: Add descriptions for CVE-2021-33193 CVE-2021-36160",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-cvs] 20210916 [httpd-site] branch main updated: Revert \"Add descriptions for CVE-2021-33193 CVE-2021-36160\"",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d@%3Ccvs.httpd.apache.org%3E"
            },
            {
              "name": "FEDORA-2021-dce7e7738e",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/"
            },
            {
              "name": "[httpd-users] 20210923 Re: [users@httpd] 2.4.49 security fixes: more info",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-users] 20210923 [users@httpd] 2.4.49 security fixes: more info",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-users] 20210923 [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-users] 20210923 Re: [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E"
            },
            {
              "name": "FEDORA-2021-e3f6dd670d",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/"
            },
            {
              "name": "[debian-lts-announce] 20210929 [SECURITY] [DLA 2768-1] uwsgi security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
            },
            {
              "name": "[httpd-bugs] 20211005 [Bug 65616] New: CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-bugs] 20211005 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-bugs] 20211006 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20211008-0004/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20211008-0004/"
            },
            {
              "name": "[httpd-bugs] 20211008 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-bugs] 20211009 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "DSA-4982",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2021/dsa-4982"
            },
            {
              "name": "[httpd-bugs] 20211011 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "[httpd-bugs] 20211012 [Bug 65616] CVE-2021-36160 regression",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a@%3Cbugs.httpd.apache.org%3E"
            },
            {
              "name": "[debian-lts-announce] 20211020 [SECURITY] [DLA 2768-2] uwsgi regression update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00016.html"
            },
            {
              "name": "20211124 Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021",
              "refsource": "CISCO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpujan2022.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
            },
            {
              "name": "https://www.oracle.com/security-alerts/cpuapr2022.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
            },
            {
              "name": "GLSA-202208-20",
              "refsource": "GENTOO",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.gentoo.org/glsa/202208-20"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-10-18T20:51Z",
      "publishedDate": "2021-09-16T15:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apache ist ein Webserver f\u00fcr verschiedene Plattformen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- CISCO Appliance\n- F5 Networks\n- Sonstiges\n- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0724 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0724.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0724 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0724"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K72382141 vom 2023-08-17",
        "url": "https://my.f5.com/manage/s/article/K72382141"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04494en_us"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:4537 vom 2021-11-10",
        "url": "https://access.redhat.com/errata/RHSA-2021:4537"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3522-1 vom 2021-10-26",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009646.html"
      },
      {
        "category": "external",
        "summary": "Apache Security Advisory vom 2021-09-16",
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-1 vom 2021-09-27",
        "url": "https://ubuntu.com/security/notices/USN-5090-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-2 vom 2021-09-27",
        "url": "https://ubuntu.com/security/notices/USN-5090-2"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:14811-1 vom 2021-09-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009511.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-3 vom 2021-09-28",
        "url": "https://ubuntu.com/security/notices/USN-5090-3"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-4 vom 2021-09-28",
        "url": "https://ubuntu.com/security/notices/USN-5090-4"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2768 vom 2021-09-30",
        "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2776 vom 2021-10-02",
        "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3299-1 vom 2021-10-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009537.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3745 vom 2021-10-07",
        "url": "https://access.redhat.com/errata/RHSA-2021:3745"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3746 vom 2021-10-07",
        "url": "https://access.redhat.com/errata/RHSA-2021:3746"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4982 vom 2021-10-10",
        "url": "https://www.debian.org/security/2021/dsa-4982"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3754 vom 2021-10-11",
        "url": "https://access.redhat.com/errata/RHSA-2021:3754"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3335-1 vom 2021-10-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K72382141 vom 2021-10-13",
        "url": "https://support.f5.com/csp/article/K72382141?utm_source=f5support\u0026utm_medium=RSS"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3816 vom 2021-10-12",
        "url": "https://access.redhat.com/errata/RHSA-2021:3816"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3837 vom 2021-10-13",
        "url": "https://access.redhat.com/errata/RHSA-2021:3837"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3836 vom 2021-10-13",
        "url": "https://access.redhat.com/errata/RHSA-2021:3836"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3816 vom 2021-10-13",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3816.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3856 vom 2021-10-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:3856"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3856 vom 2021-10-15",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3856.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-119 vom 2021-10-15",
        "url": "https://downloads.avaya.com/css/P8/documents/101078189"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1543 vom 2021-10-15",
        "url": "https://alas.aws.amazon.com/ALAS-2021-1543.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1716 vom 2021-10-15",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1716.html"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-139 vom 2021-11-12",
        "url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-139/index.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:3856 vom 2021-11-17",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-November/048391.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-4537 vom 2021-11-18",
        "url": "https://linux.oracle.com/errata/ELSA-2021-4537.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory CISCO-SA-APACHE-HTTPD-2 vom 2021-11-24",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
      },
      {
        "category": "external",
        "summary": "Security Affairs vom 2021-11-29",
        "url": "https://securityaffairs.co/wordpress/125107/hacking/cve-2021-40438-apache-http-server-attacks.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-9619 vom 2021-12-16",
        "url": "http://linux.oracle.com/errata/ELSA-2021-9619.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory CISCO-SA-APACHE-HTTPD-2.4.49-VWL69SWQ vom 2021-12-21",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20211008-0004 vom 2021-12-22",
        "url": "https://security.netapp.com/advisory/ntap-20211008-0004/"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9005 vom 2022-01-06",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9005.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0143 vom 2022-01-17",
        "url": "https://access.redhat.com/errata/RHSA-2022:0143"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0143 vom 2022-01-19",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0143.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0258 vom 2022-01-26",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0258.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2022:0143 vom 2022-01-25",
        "url": "https://lists.centos.org/pipermail/centos-announce/2022-January/073551.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-003 vom 2027-01-18",
        "url": "https://downloads.avaya.com/css/P8/documents/101079910"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-1915 vom 2022-05-17",
        "url": "https://linux.oracle.com/errata/ELSA-2022-1915.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0891 vom 2022-03-15",
        "url": "https://access.redhat.com/errata/RHSA-2022:0891"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0891 vom 2022-03-16",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0891.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-029 vom 2022-03-15",
        "url": "https://downloads.avaya.com/css/P8/documents/101080898"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097639 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097639"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1915 vom 2022-05-10",
        "url": "https://access.redhat.com/errata/RHSA-2022:1915"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-053 vom 2022-07-18",
        "url": "https://downloads.avaya.com/css/P8/documents/101082704"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202208-20 vom 2022-08-14",
        "url": "https://security.gentoo.org/glsa/202208-20"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2022-1599 vom 2022-09-14",
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1599"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2022-1597 vom 2022-09-14",
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1597"
      },
      {
        "category": "external",
        "summary": "HPE SECURITY BULLETIN HPESBST04367 rev.1 vom 2022-09-21",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04367en_us"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6753 vom 2022-09-29",
        "url": "https://access.redhat.com/errata/RHSA-2022:6753"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7143"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7144"
      }
    ],
    "source_lang": "en-US",
    "title": "Apache HTTP Server: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-08-17T22:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T16:53:16.948+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-0724",
      "initial_release_date": "2021-09-16T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-09-16T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-09-20T22:00:00.000+00:00",
          "number": "2",
          "summary": "Korrektur"
        },
        {
          "date": "2021-09-27T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
        },
        {
          "date": "2021-09-28T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2021-09-29T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-03T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-06T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-10-07T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-10-10T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-12T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von SUSE, F5 und Red Hat aufgenommen"
        },
        {
          "date": "2021-10-13T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2021-10-14T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-10-17T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von AVAYA und Amazon aufgenommen"
        },
        {
          "date": "2021-10-26T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-11-09T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-11-11T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2021-11-17T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von CentOS aufgenommen"
        },
        {
          "date": "2021-11-18T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-11-24T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Cisco aufgenommen"
        },
        {
          "date": "2021-11-29T23:00:00.000+00:00",
          "number": "20",
          "summary": "Exploit aufgenommen"
        },
        {
          "date": "2021-12-15T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-12-20T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Cisco aufgenommen"
        },
        {
          "date": "2021-12-22T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-01-05T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-01-16T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-01-19T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-01-25T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Oracle Linux und CentOS aufgenommen"
        },
        {
          "date": "2022-01-27T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-03-15T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-03-16T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Oracle Linux und AVAYA aufgenommen"
        },
        {
          "date": "2022-04-24T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-05-10T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-07-19T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-08-14T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2022-09-13T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von BROCADE aufgenommen"
        },
        {
          "date": "2022-09-20T22:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2022-09-29T22:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-10-26T22:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-08-13T22:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2023-08-17T22:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von F5 aufgenommen"
        }
      ],
      "status": "final",
      "version": "41"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Apache HTTP Server \u003c 2.4.49",
            "product": {
              "name": "Apache HTTP Server \u003c 2.4.49",
              "product_id": "67869",
              "product_identification_helper": {
                "cpe": "cpe:/a:apache:http_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Apache"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Communication Manager",
            "product": {
              "name": "Avaya Aura Communication Manager",
              "product_id": "T015126",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:communication_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Web License Manager",
            "product": {
              "name": "Avaya Web License Manager",
              "product_id": "T016243",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:web_license_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Broadcom Brocade Switch",
            "product": {
              "name": "Broadcom Brocade Switch",
              "product_id": "T015844",
              "product_identification_helper": {
                "cpe": "cpe:/h:brocade:switch:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Broadcom"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco Expressway",
            "product": {
              "name": "Cisco Expressway",
              "product_id": "T014329",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:expressway_software:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco FXOS",
            "product": {
              "name": "Cisco FXOS",
              "product_id": "660564",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:fxos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Firepower",
            "product": {
              "name": "Cisco Firepower",
              "product_id": "T011337",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:firepower:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Prime Collaboration Provisioning",
            "product": {
              "name": "Cisco Prime Collaboration Provisioning",
              "product_id": "T021406",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:prime_collaboration:::provisioning"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Prime Infrastructure",
            "product": {
              "name": "Cisco Prime Infrastructure",
              "product_id": "T000756",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:prime_infrastructure:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Security Manager (CSM)",
            "product": {
              "name": "Cisco Security Manager (CSM)",
              "product_id": "95918",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:security_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco TelePresence Video Communication Server",
            "product": {
              "name": "Cisco TelePresence Video Communication Server",
              "product_id": "T018121",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:telepresence:video_communication_server"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Computing System (UCS)",
            "product": {
              "name": "Cisco Unified Computing System (UCS)",
              "product_id": "163824",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:unified_computing_system:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Wide Area Application Services",
            "product": {
              "name": "Cisco Wide Area Application Services",
              "product_id": "2186",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:wide_area_application_services:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "F5 BIG-IP",
                "product": {
                  "name": "F5 BIG-IP",
                  "product_id": "T001663",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 17.0.0",
                "product": {
                  "name": "F5 BIG-IP \u003c 17.0.0",
                  "product_id": "T025087",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:17.0.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 15.1.7",
                "product": {
                  "name": "F5 BIG-IP \u003c 15.1.7",
                  "product_id": "T026110",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:15.1.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 16.1.4",
                "product": {
                  "name": "F5 BIG-IP \u003c 16.1.4",
                  "product_id": "T029403",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:16.1.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HPE Fabric OS",
            "product": {
              "name": "HPE Fabric OS",
              "product_id": "T019403",
              "product_identification_helper": {
                "cpe": "cpe:/o:hpe:fabric_os:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "HPE Switch",
            "product": {
              "name": "HPE Switch",
              "product_id": "T005119",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:switch:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Command Suite",
            "product": {
              "name": "Hitachi Command Suite",
              "product_id": "T010951",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:command_suite:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Configuration Manager",
            "product": {
              "name": "Hitachi Configuration Manager",
              "product_id": "T020304",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:configuration_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T017562",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp Data ONTAP",
            "product": {
              "name": "NetApp Data ONTAP",
              "product_id": "7654",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:data_ontap:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "NetApp StorageGRID",
            "product": {
              "name": "NetApp StorageGRID",
              "product_id": "920206",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:storagegrid:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-40438",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-40438"
    },
    {
      "cve": "CVE-2021-39275",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-39275"
    },
    {
      "cve": "CVE-2021-34798",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-34798"
    },
    {
      "cve": "CVE-2021-20325",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-20325"
    },
    {
      "cve": "CVE-2021-36160",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Apache HTTP Server. Der Fehler besteht aufgrund eines Out-of-Bound Read in \"mod_proxy_uwsgi\". Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um den zugewiesenen Speicher zu lesen und einen Denial-of-Service-Zustand zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-36160"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Apache ist ein Webserver f\u00fcr verschiedene Plattformen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- UNIX\n- Linux\n- Windows\n- CISCO Appliance\n- F5 Networks\n- Sonstiges\n- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-0724 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2022-0724.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-0724 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-0724"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K72382141 vom 2023-08-17",
        "url": "https://my.f5.com/manage/s/article/K72382141"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04494en_us"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:4537 vom 2021-11-10",
        "url": "https://access.redhat.com/errata/RHSA-2021:4537"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3522-1 vom 2021-10-26",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009646.html"
      },
      {
        "category": "external",
        "summary": "Apache Security Advisory vom 2021-09-16",
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-1 vom 2021-09-27",
        "url": "https://ubuntu.com/security/notices/USN-5090-1"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-2 vom 2021-09-27",
        "url": "https://ubuntu.com/security/notices/USN-5090-2"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:14811-1 vom 2021-09-27",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-September/009511.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-3 vom 2021-09-28",
        "url": "https://ubuntu.com/security/notices/USN-5090-3"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-5090-4 vom 2021-09-28",
        "url": "https://ubuntu.com/security/notices/USN-5090-4"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2768 vom 2021-09-30",
        "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-2776 vom 2021-10-02",
        "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3299-1 vom 2021-10-06",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009537.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3745 vom 2021-10-07",
        "url": "https://access.redhat.com/errata/RHSA-2021:3745"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3746 vom 2021-10-07",
        "url": "https://access.redhat.com/errata/RHSA-2021:3746"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-4982 vom 2021-10-10",
        "url": "https://www.debian.org/security/2021/dsa-4982"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3754 vom 2021-10-11",
        "url": "https://access.redhat.com/errata/RHSA-2021:3754"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2021:3335-1 vom 2021-10-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-October/009564.html"
      },
      {
        "category": "external",
        "summary": "F5 Security Advisory K72382141 vom 2021-10-13",
        "url": "https://support.f5.com/csp/article/K72382141?utm_source=f5support\u0026utm_medium=RSS"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3816 vom 2021-10-12",
        "url": "https://access.redhat.com/errata/RHSA-2021:3816"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3837 vom 2021-10-13",
        "url": "https://access.redhat.com/errata/RHSA-2021:3837"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3836 vom 2021-10-13",
        "url": "https://access.redhat.com/errata/RHSA-2021:3836"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3816 vom 2021-10-13",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3816.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2021:3856 vom 2021-10-14",
        "url": "https://access.redhat.com/errata/RHSA-2021:3856"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-3856 vom 2021-10-15",
        "url": "http://linux.oracle.com/errata/ELSA-2021-3856.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2021-119 vom 2021-10-15",
        "url": "https://downloads.avaya.com/css/P8/documents/101078189"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1543 vom 2021-10-15",
        "url": "https://alas.aws.amazon.com/ALAS-2021-1543.html"
      },
      {
        "category": "external",
        "summary": "Amazon Linux Security Advisory ALAS-2021-1716 vom 2021-10-15",
        "url": "https://alas.aws.amazon.com/AL2/ALAS-2021-1716.html"
      },
      {
        "category": "external",
        "summary": "Hitachi Vulnerability Information HITACHI-SEC-2021-139 vom 2021-11-12",
        "url": "https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-139/index.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2021:3856 vom 2021-11-17",
        "url": "https://lists.centos.org/pipermail/centos-announce/2021-November/048391.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-4537 vom 2021-11-18",
        "url": "https://linux.oracle.com/errata/ELSA-2021-4537.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory CISCO-SA-APACHE-HTTPD-2 vom 2021-11-24",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
      },
      {
        "category": "external",
        "summary": "Security Affairs vom 2021-11-29",
        "url": "https://securityaffairs.co/wordpress/125107/hacking/cve-2021-40438-apache-http-server-attacks.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2021-9619 vom 2021-12-16",
        "url": "http://linux.oracle.com/errata/ELSA-2021-9619.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory CISCO-SA-APACHE-HTTPD-2.4.49-VWL69SWQ vom 2021-12-21",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20211008-0004 vom 2021-12-22",
        "url": "https://security.netapp.com/advisory/ntap-20211008-0004/"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-9005 vom 2022-01-06",
        "url": "https://linux.oracle.com/errata/ELSA-2022-9005.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0143 vom 2022-01-17",
        "url": "https://access.redhat.com/errata/RHSA-2022:0143"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0143 vom 2022-01-19",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0143.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0258 vom 2022-01-26",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0258.html"
      },
      {
        "category": "external",
        "summary": "CentOS Security Advisory CESA-2022:0143 vom 2022-01-25",
        "url": "https://lists.centos.org/pipermail/centos-announce/2022-January/073551.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-003 vom 2027-01-18",
        "url": "https://downloads.avaya.com/css/P8/documents/101079910"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-1915 vom 2022-05-17",
        "url": "https://linux.oracle.com/errata/ELSA-2022-1915.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:0891 vom 2022-03-15",
        "url": "https://access.redhat.com/errata/RHSA-2022:0891"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2022-0891 vom 2022-03-16",
        "url": "http://linux.oracle.com/errata/ELSA-2022-0891.html"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-029 vom 2022-03-15",
        "url": "https://downloads.avaya.com/css/P8/documents/101080898"
      },
      {
        "category": "external",
        "summary": "HCL Article KB0097639 vom 2022-04-23",
        "url": "https://support.hcltechsw.com/csm?id=kb_article\u0026sysparm_article=KB0097639"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:1915 vom 2022-05-10",
        "url": "https://access.redhat.com/errata/RHSA-2022:1915"
      },
      {
        "category": "external",
        "summary": "AVAYA Security Advisory ASA-2022-053 vom 2022-07-18",
        "url": "https://downloads.avaya.com/css/P8/documents/101082704"
      },
      {
        "category": "external",
        "summary": "Gentoo Linux Security Advisory GLSA-202208-20 vom 2022-08-14",
        "url": "https://security.gentoo.org/glsa/202208-20"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2022-1599 vom 2022-09-14",
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1599"
      },
      {
        "category": "external",
        "summary": "Brocade Security Advisory BSA-2022-1597 vom 2022-09-14",
        "url": "https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-1597"
      },
      {
        "category": "external",
        "summary": "HPE SECURITY BULLETIN HPESBST04367 rev.1 vom 2022-09-21",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbst04367en_us"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:6753 vom 2022-09-29",
        "url": "https://access.redhat.com/errata/RHSA-2022:6753"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7143 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7143"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2022:7144 vom 2022-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2022:7144"
      }
    ],
    "source_lang": "en-US",
    "title": "Apache HTTP Server: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2023-08-17T22:00:00.000+00:00",
      "generator": {
        "date": "2024-02-15T16:53:16.948+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.0"
        }
      },
      "id": "WID-SEC-W-2022-0724",
      "initial_release_date": "2021-09-16T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2021-09-16T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2021-09-20T22:00:00.000+00:00",
          "number": "2",
          "summary": "Korrektur"
        },
        {
          "date": "2021-09-27T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
        },
        {
          "date": "2021-09-28T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2021-09-29T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-03T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-06T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-10-07T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-10-10T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2021-10-12T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von SUSE, F5 und Red Hat aufgenommen"
        },
        {
          "date": "2021-10-13T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2021-10-14T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-10-17T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von AVAYA und Amazon aufgenommen"
        },
        {
          "date": "2021-10-26T22:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2021-11-09T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2021-11-11T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von HITACHI aufgenommen"
        },
        {
          "date": "2021-11-17T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von CentOS aufgenommen"
        },
        {
          "date": "2021-11-18T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-11-24T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Cisco aufgenommen"
        },
        {
          "date": "2021-11-29T23:00:00.000+00:00",
          "number": "20",
          "summary": "Exploit aufgenommen"
        },
        {
          "date": "2021-12-15T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2021-12-20T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Cisco aufgenommen"
        },
        {
          "date": "2021-12-22T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-01-05T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-01-16T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-01-19T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-01-25T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Oracle Linux und CentOS aufgenommen"
        },
        {
          "date": "2022-01-27T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-03-15T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-03-16T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Oracle Linux und AVAYA aufgenommen"
        },
        {
          "date": "2022-04-24T22:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von HCL aufgenommen"
        },
        {
          "date": "2022-05-10T22:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-05-17T22:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2022-07-19T22:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von AVAYA aufgenommen"
        },
        {
          "date": "2022-08-14T22:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Gentoo aufgenommen"
        },
        {
          "date": "2022-09-13T22:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von BROCADE aufgenommen"
        },
        {
          "date": "2022-09-20T22:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2022-09-29T22:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2022-10-26T22:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2023-08-13T22:00:00.000+00:00",
          "number": "40",
          "summary": "Neue Updates von HP aufgenommen"
        },
        {
          "date": "2023-08-17T22:00:00.000+00:00",
          "number": "41",
          "summary": "Neue Updates von F5 aufgenommen"
        }
      ],
      "status": "final",
      "version": "41"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Amazon Linux 2",
            "product": {
              "name": "Amazon Linux 2",
              "product_id": "398363",
              "product_identification_helper": {
                "cpe": "cpe:/o:amazon:linux_2:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Amazon"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Apache HTTP Server \u003c 2.4.49",
            "product": {
              "name": "Apache HTTP Server \u003c 2.4.49",
              "product_id": "67869",
              "product_identification_helper": {
                "cpe": "cpe:/a:apache:http_server:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Apache"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Avaya Aura Application Enablement Services",
            "product": {
              "name": "Avaya Aura Application Enablement Services",
              "product_id": "T015516",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_application_enablement_services:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Communication Manager",
            "product": {
              "name": "Avaya Aura Communication Manager",
              "product_id": "T015126",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:communication_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Experience Portal",
            "product": {
              "name": "Avaya Aura Experience Portal",
              "product_id": "T015519",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_experience_portal:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura Session Manager",
            "product": {
              "name": "Avaya Aura Session Manager",
              "product_id": "T015127",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:session_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Aura System Manager",
            "product": {
              "name": "Avaya Aura System Manager",
              "product_id": "T015518",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:aura_system_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Avaya Web License Manager",
            "product": {
              "name": "Avaya Web License Manager",
              "product_id": "T016243",
              "product_identification_helper": {
                "cpe": "cpe:/a:avaya:web_license_manager:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Avaya"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Broadcom Brocade Switch",
            "product": {
              "name": "Broadcom Brocade Switch",
              "product_id": "T015844",
              "product_identification_helper": {
                "cpe": "cpe:/h:brocade:switch:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Broadcom"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco Expressway",
            "product": {
              "name": "Cisco Expressway",
              "product_id": "T014329",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:expressway_software:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco FXOS",
            "product": {
              "name": "Cisco FXOS",
              "product_id": "660564",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:fxos:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Firepower",
            "product": {
              "name": "Cisco Firepower",
              "product_id": "T011337",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:firepower:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Prime Collaboration Provisioning",
            "product": {
              "name": "Cisco Prime Collaboration Provisioning",
              "product_id": "T021406",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:prime_collaboration:::provisioning"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Prime Infrastructure",
            "product": {
              "name": "Cisco Prime Infrastructure",
              "product_id": "T000756",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:prime_infrastructure:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Security Manager (CSM)",
            "product": {
              "name": "Cisco Security Manager (CSM)",
              "product_id": "95918",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:security_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco TelePresence Video Communication Server",
            "product": {
              "name": "Cisco TelePresence Video Communication Server",
              "product_id": "T018121",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:telepresence:video_communication_server"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Unified Computing System (UCS)",
            "product": {
              "name": "Cisco Unified Computing System (UCS)",
              "product_id": "163824",
              "product_identification_helper": {
                "cpe": "cpe:/h:cisco:unified_computing_system:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco Wide Area Application Services",
            "product": {
              "name": "Cisco Wide Area Application Services",
              "product_id": "2186",
              "product_identification_helper": {
                "cpe": "cpe:/a:cisco:wide_area_application_services:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "F5 BIG-IP",
                "product": {
                  "name": "F5 BIG-IP",
                  "product_id": "T001663",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 17.0.0",
                "product": {
                  "name": "F5 BIG-IP \u003c 17.0.0",
                  "product_id": "T025087",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:17.0.0"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 15.1.7",
                "product": {
                  "name": "F5 BIG-IP \u003c 15.1.7",
                  "product_id": "T026110",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:15.1.7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "F5 BIG-IP \u003c 16.1.4",
                "product": {
                  "name": "F5 BIG-IP \u003c 16.1.4",
                  "product_id": "T029403",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:f5:big-ip:16.1.4"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "BIG-IP"
          }
        ],
        "category": "vendor",
        "name": "F5"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Gentoo Linux",
            "product": {
              "name": "Gentoo Linux",
              "product_id": "T012167",
              "product_identification_helper": {
                "cpe": "cpe:/o:gentoo:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Gentoo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HPE Fabric OS",
            "product": {
              "name": "HPE Fabric OS",
              "product_id": "T019403",
              "product_identification_helper": {
                "cpe": "cpe:/o:hpe:fabric_os:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "HPE Switch",
            "product": {
              "name": "HPE Switch",
              "product_id": "T005119",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:switch:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Hitachi Command Suite",
            "product": {
              "name": "Hitachi Command Suite",
              "product_id": "T010951",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:command_suite:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Configuration Manager",
            "product": {
              "name": "Hitachi Configuration Manager",
              "product_id": "T020304",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:configuration_manager:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Hitachi Ops Center",
            "product": {
              "name": "Hitachi Ops Center",
              "product_id": "T017562",
              "product_identification_helper": {
                "cpe": "cpe:/a:hitachi:ops_center:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Hitachi"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp Data ONTAP",
            "product": {
              "name": "NetApp Data ONTAP",
              "product_id": "7654",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:data_ontap:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "NetApp StorageGRID",
            "product": {
              "name": "NetApp StorageGRID",
              "product_id": "920206",
              "product_identification_helper": {
                "cpe": "cpe:/a:netapp:storagegrid:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Open Source CentOS",
            "product": {
              "name": "Open Source CentOS",
              "product_id": "1727",
              "product_identification_helper": {
                "cpe": "cpe:/o:centos:centos:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-40438",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-40438"
    },
    {
      "cve": "CVE-2021-39275",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-39275"
    },
    {
      "cve": "CVE-2021-34798",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-34798"
    },
    {
      "cve": "CVE-2021-20325",
      "notes": [
        {
          "category": "description",
          "text": "In Apache HTTP Server existieren mehrere Schwachstellen. Die Schwachstellen bestehen aufgrund einer NULL-Zeiger-Dereferenz im \"httpd core\", eines Puffer\u00fcberlaufs in \"ap_escape_quotes\" bei b\u00f6swilliger Eingabe und einer Server Side Request Forgery (SSRF) bei der Verwendung von \"mod_proxy\". Ein entfernter Angreifer kann diese Schwachstellen ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-20325"
    },
    {
      "cve": "CVE-2021-36160",
      "notes": [
        {
          "category": "description",
          "text": "Es existiert eine Schwachstelle in Apache HTTP Server. Der Fehler besteht aufgrund eines Out-of-Bound Read in \"mod_proxy_uwsgi\". Ein entfernter Angreifer kann diese Schwachstelle ausnutzen, um den zugewiesenen Speicher zu lesen und einen Denial-of-Service-Zustand zu verursachen."
        }
      ],
      "product_status": {
        "known_affected": [
          "67646",
          "T010951",
          "T015844",
          "T015127",
          "T015126",
          "T004914",
          "T018121",
          "T000756",
          "T020304",
          "T001663",
          "398363",
          "163824",
          "T015519",
          "T015518",
          "T014329",
          "T015516",
          "T011337",
          "7654",
          "T005119",
          "2186",
          "T012167",
          "T016243",
          "T017562",
          "T019403",
          "2951",
          "T002207",
          "T021406",
          "T000126",
          "660564",
          "95918",
          "920206",
          "1727"
        ]
      },
      "release_date": "2021-09-16T22:00:00Z",
      "title": "CVE-2021-36160"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202109-1804",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "clustered data ontap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "http server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.3.0"
      },
      {
        "model": "communications cloud native core network function cloud native environment",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "1.10.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "10.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "11.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "9.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "34"
      },
      {
        "model": "http server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "12.2.1.4.0"
      },
      {
        "model": "storagegrid",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "instantis enterprisetrack",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "17.2"
      },
      {
        "model": "zfs storage appliance kit",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.8"
      },
      {
        "model": "http server",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.4.30"
      },
      {
        "model": "peoplesoft enterprise peopletools",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "8.58"
      },
      {
        "model": "instantis enterprisetrack",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "17.3"
      },
      {
        "model": "enterprise manager base platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "13.5.0.0"
      },
      {
        "model": "instantis enterprisetrack",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "17.1"
      },
      {
        "model": "brocade fabric operating system",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": "cloud backup",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "netapp",
        "version": null
      },
      {
        "model": "enterprise manager base platform",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "oracle",
        "version": "13.4.0.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "35"
      },
      {
        "model": "http server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "apache",
        "version": "2.4.48"
      },
      {
        "model": "fedora",
        "scope": null,
        "trust": 0.8,
        "vendor": "fedora",
        "version": null
      },
      {
        "model": "http server",
        "scope": null,
        "trust": 0.8,
        "vendor": "apache",
        "version": null
      },
      {
        "model": "http server",
        "scope": "gte",
        "trust": 0.6,
        "vendor": "apache",
        "version": "2.4.30,\u003c=2.4.48"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.4.48",
                "versionStartIncluding": "2.4.30",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Ubuntu",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2021-36160",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Low",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 5.0,
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2021-36160",
            "impactScore": null,
            "integrityImpact": "None",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Medium",
            "trust": 0.9,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2022-03205",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 10.0,
            "id": "VHN-397448",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "NVD",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 7.5,
            "baseSeverity": "High",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2021-36160",
            "impactScore": null,
            "integrityImpact": "None",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2021-36160",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2022-03205",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202109-1113",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-397448",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2021-36160",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive). The server is fast, reliable and extensible through a simple API. The highest threat from this vulnerability is to system availability. ==========================================================================\nUbuntu Security Notice USN-5090-3\nSeptember 28, 2021\n\napache2 regression\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 21.04\n- Ubuntu 20.04 LTS\n- Ubuntu 18.04 LTS\n\nSummary:\n\nUSN-5090-1 introduced a regression in Apache HTTP Server. One of the upstream\nfixes introduced a regression in UDS URIs. This update fixes the problem. \n\nOriginal advisory details:\n\n James Kettle discovered that the Apache HTTP Server HTTP/2 module\n incorrectly handled certain crafted methods. A remote attacker could\n possibly use this issue to perform request splitting or cache poisoning\n attacks. A remote attacker could possibly use this issue to\n cause the server to crash, resulting in a denial of service. \n (CVE-2021-34798)\n  Li Zhi Xin discovered that the Apache mod_proxy_uwsgi module incorrectly\n handled certain request uri-paths. A remote attacker could possibly use\n this issue to cause the server to crash, resulting in a denial of service. \n This issue only affected Ubuntu 20.04 LTS and Ubuntu 21.04. If the server was configured with third-party modules, a remote\n attacker could use this issue to cause the server to crash, resulting in a\n denial of service, or possibly execute arbitrary code. (CVE-2021-39275)\n  It was discovered that the Apache mod_proxy module incorrectly handled\n certain request uri-paths. A remote attacker could possibly use this issue\n to cause the server to forward requests to arbitrary origin servers. \n (CVE-2021-40438)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 21.04:\n  apache2                         2.4.46-4ubuntu1.3\n  apache2-bin                     2.4.46-4ubuntu1.3\n\nUbuntu 20.04 LTS:\n  apache2                         2.4.41-4ubuntu3.6\n  apache2-bin                     2.4.41-4ubuntu3.6\n\nUbuntu 18.04 LTS:\n  apache2                         2.4.29-1ubuntu4.18\n  apache2-bin                     2.4.29-1ubuntu4.18\n\nIn general, a standard system update will make all the necessary changes. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=====================================================================\n                   Red Hat Security Advisory\n\nSynopsis:          Moderate: httpd24-httpd security and bug fix update\nAdvisory ID:       RHSA-2022:6753-01\nProduct:           Red Hat Software Collections\nAdvisory URL:      https://access.redhat.com/errata/RHSA-2022:6753\nIssue date:        2022-09-29\nCVE Names:         CVE-2021-33193 CVE-2021-34798 CVE-2021-36160 \n                   CVE-2021-39275 CVE-2021-44224 CVE-2022-22719 \n                   CVE-2022-22721 CVE-2022-23943 CVE-2022-26377 \n                   CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 \n                   CVE-2022-30522 CVE-2022-30556 CVE-2022-31813 \n=====================================================================\n\n1. Summary:\n\nAn update for httpd24-httpd is now available for Red Hat Software\nCollections. \n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - noarch, ppc64le, s390x, x86_64\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64\n\n3. \n\nSecurity Fix(es):\n\n* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy\n(CVE-2021-33193)\n\n* httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path\n(CVE-2021-36160)\n\n* httpd: Out-of-bounds write in ap_escape_quotes() via malicious input\n(CVE-2021-39275)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations\n(CVE-2021-44224)\n\n* httpd: mod_lua: Use of uninitialized value of in r:parsebody\n(CVE-2022-22719)\n\n* httpd: core: Possible buffer overflow with very large or unlimited\nLimitXMLRequestBody (CVE-2022-22721)\n\n* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)\n\n* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)\n\n* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)\n\n* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism\n(CVE-2022-31813)\n\n* httpd: out-of-bounds read via ap_rwrite() (CVE-2022-28614)\n\n* httpd: out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)\n\n* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section. \n\nBug Fix(es):\n\n* proxy rewrite to unix socket fails with CVE-2021-40438 fix (BZ#2022319)\n\nAdditional changes:\n\n* To fix CVE-2022-29404, the default value for the \"LimitRequestBody\"\ndirective in the Apache HTTP Server has been changed from 0 (unlimited) to\n1 GiB. \n\nOn systems where the value of \"LimitRequestBody\" is not explicitly\nspecified in an httpd configuration file, updating the httpd package sets\n\"LimitRequestBody\" to the default value of 1 GiB. As a consequence, if the\ntotal size of the HTTP request body exceeds this 1 GiB default limit, httpd\nreturns the 413 Request Entity Too Large error code. \n\nIf the new default allowed size of an HTTP request message body is\ninsufficient for your use case, update your httpd configuration files\nwithin the respective context (server, per-directory, per-file, or\nper-location) and set your preferred limit in bytes. For example, to set a\nnew 2 GiB limit, use:\n\nLimitRequestBody 2147483648\n\nSystems already configured to use any explicit value for the\n\"LimitRequestBody\" directive are unaffected by this change. \n\n4. Solution:\n\nFor details on how to apply this update, which includes the changes\ndescribed in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the updated packages, the httpd daemon will be restarted\nautomatically. \n\n5. Bugs fixed (https://bugzilla.redhat.com/):\n\n1966728 - CVE-2021-33193 httpd: Request splitting via HTTP/2 method injection and mod_proxy\n2005119 - CVE-2021-39275 httpd: Out-of-bounds write in ap_escape_quotes() via malicious input\n2005124 - CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path\n2005128 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests\n2034672 - CVE-2021-44224 httpd: possible NULL dereference or SSRF in forward proxy configurations\n2064319 - CVE-2022-23943 httpd: mod_sed: Read/write beyond bounds\n2064320 - CVE-2022-22721 httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody\n2064322 - CVE-2022-22719 httpd: mod_lua: Use of uninitialized value of in r:parsebody\n2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling\n2095002 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()\n2095006 - CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match()\n2095012 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody\n2095015 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability\n2095018 - CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets\n2095020 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism\n\n6. Package List:\n\nRed Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):\n\nSource:\nhttpd24-httpd-2.4.34-23.el7.5.src.rpm\n\nnoarch:\nhttpd24-httpd-manual-2.4.34-23.el7.5.noarch.rpm\n\nppc64le:\nhttpd24-httpd-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-httpd-debuginfo-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-httpd-devel-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-httpd-tools-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-mod_ldap-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-mod_proxy_html-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-mod_session-2.4.34-23.el7.5.ppc64le.rpm\nhttpd24-mod_ssl-2.4.34-23.el7.5.ppc64le.rpm\n\ns390x:\nhttpd24-httpd-2.4.34-23.el7.5.s390x.rpm\nhttpd24-httpd-debuginfo-2.4.34-23.el7.5.s390x.rpm\nhttpd24-httpd-devel-2.4.34-23.el7.5.s390x.rpm\nhttpd24-httpd-tools-2.4.34-23.el7.5.s390x.rpm\nhttpd24-mod_ldap-2.4.34-23.el7.5.s390x.rpm\nhttpd24-mod_proxy_html-2.4.34-23.el7.5.s390x.rpm\nhttpd24-mod_session-2.4.34-23.el7.5.s390x.rpm\nhttpd24-mod_ssl-2.4.34-23.el7.5.s390x.rpm\n\nx86_64:\nhttpd24-httpd-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-debuginfo-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-devel-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-tools-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_ldap-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_proxy_html-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_session-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_ssl-2.4.34-23.el7.5.x86_64.rpm\n\nRed Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):\n\nSource:\nhttpd24-httpd-2.4.34-23.el7.5.src.rpm\n\nnoarch:\nhttpd24-httpd-manual-2.4.34-23.el7.5.noarch.rpm\n\nx86_64:\nhttpd24-httpd-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-debuginfo-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-devel-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-httpd-tools-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_ldap-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_proxy_html-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_session-2.4.34-23.el7.5.x86_64.rpm\nhttpd24-mod_ssl-2.4.34-23.el7.5.x86_64.rpm\n\nThese packages are GPG signed by Red Hat for security.  Our key and\ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/\n\n7. References:\n\nhttps://access.redhat.com/security/cve/CVE-2021-33193\nhttps://access.redhat.com/security/cve/CVE-2021-34798\nhttps://access.redhat.com/security/cve/CVE-2021-36160\nhttps://access.redhat.com/security/cve/CVE-2021-39275\nhttps://access.redhat.com/security/cve/CVE-2021-44224\nhttps://access.redhat.com/security/cve/CVE-2022-22719\nhttps://access.redhat.com/security/cve/CVE-2022-22721\nhttps://access.redhat.com/security/cve/CVE-2022-23943\nhttps://access.redhat.com/security/cve/CVE-2022-26377\nhttps://access.redhat.com/security/cve/CVE-2022-28614\nhttps://access.redhat.com/security/cve/CVE-2022-28615\nhttps://access.redhat.com/security/cve/CVE-2022-29404\nhttps://access.redhat.com/security/cve/CVE-2022-30522\nhttps://access.redhat.com/security/cve/CVE-2022-30556\nhttps://access.redhat.com/security/cve/CVE-2022-31813\nhttps://access.redhat.com/security/updates/classification/#moderate\nhttps://access.redhat.com/articles/6975397\n\n8. Contact:\n\nThe Red Hat security contact is \u003csecalert@redhat.com\u003e. More contact\ndetails at https://access.redhat.com/security/team/contact/\n\nCopyright 2022 Red Hat, Inc. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1\n\niQIVAwUBYzXoqNzjgjWX9erEAQhSKA//d1V5w3Dbdd0R1QxlXMIweLpztJrkXpmN\nEY7WAFIMy0MG64KNjZFF5i4USpUlCm/tZX/fHZas4JjhZBqLxNSqsOdPeynDqp+8\nqZnnGiIhyO37S7x5v89VSaWngLpTi2f0d7RmJ05VJzAP8Q0a9cTqtIZiCsM18tTg\nBdoD1M/VWUhtPWCzgXiQVI8yF44IOenN2095OCv1Vxc3kiwQdbWcd7Uqz2TgVQ1m\nqeqh9AHqaDTwHVM9Ipj5oGp1Ue5zsyAEd77ClBCAzP3p7bWucfTErDrUSE3/hkDm\nH8BlPVPaOsRv0poFvvCODQhccC2bFc3uxoKzfSx+/WwkrU7vO/5/npmOfcwKfvBQ\nFYqhqADiUcfpJGENligpNAHLI+Pijrl2Tfwl0XbDa8+7KXQ0T75VG3Gq7dFlPcUm\n965hFguLI0es2FpGcJldEqsc1XJxdkPmzTYhqDWLLED5X72dwQdtKwhMaFFVctK+\nKyspQqaci6bVr9ETF89r0ZBmnxXjSIY7/ijySy0KnldW25t+ZGmLV4pM3CYb7ZVz\nqEm9I/oRD0JB/4C5Bk9j5nWF3gzE2MhYfeepqINGIbfvNPiP8G2LFL/CEz46isF9\nrFUT/az/p5mdNEwwe5GhEgLkpk0fhcZiAtJ4bGRcJ9YRURh5rrMPtXmXP5THoMau\n3VmN11LnfT4=\n=pvMD\n-----END PGP SIGNATURE-----\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://listman.redhat.com/mailman/listinfo/rhsa-announce\n. \n\nFor the oldstable distribution (buster), these problems have been fixed\nin version 2.4.38-3+deb10u6. \n\nFor the stable distribution (bullseye), these problems have been fixed in\nversion 2.4.51-1~deb11u1. \n\nWe recommend that you upgrade your apache2 packages. \n\nFor the detailed security status of apache2 please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/apache2\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmFgr44ACgkQEMKTtsN8\nTjbophAAiZ+fhF2r8BUbQkL8BhpfqjA+hVsp9WEMTn8Gq6kiW0wLvK3jWPM301Ou\nD4gHqKmFPmYNC1KBOyk/lJdxyD7iTUweUyLi3WXzxhIDMx0kxkRw1oXlyCHzIqSJ\nM277bgk32h2cDCbsXjrN/8agKPcKgfwDqiyf/igfEq6V8OB2zVvJPKVFq45n54+q\n4FPXSyx1g2u5ewSeXbU2uHDej6Qborui4osDdbwx8CT6aETi0cIXJ8RbXF3PUCHG\n5DzZagnRq6GumPsl01jcPu7b9Ck8MlkxMSG3FRsSIJVkwpsQ2C34ywIJkFlzUZZh\njhdVUrfbyfLpSdcPcipAAjl9I6gDqa9SFdMRK7ixCpQ6iTiVeDZdJ8pA4jnSweNQ\nTHik07di9R0juX0p7peQiIyBKrEf7Y3WSvLOn0SBKXvZnzc/72rH2nP5FclsgCsV\nTWxptziGridC43KB8/tDJAAOXVF2lzylzF70V/UGTNo1jk9w3/p6btU1iuzKspyY\nY4aPZla3DImI8mezrgFrGYNg7bZYLKuJyGDADKih2sUQpzmDZ6MJxKAE3NLRWyQa\n7cCJdoNR9yVqytEw1Y/ZRXAXWfMb3Y1ts2EqR8hzLQgMYb0JC58cLMG3T0RgyPoO\nA4CTIoYpK1WnsykAE8M4XFrnOW3lrtse6T8N/dTVMuodElAEhc0=\n=/At6\n-----END PGP SIGNATURE-----\n. 8) - aarch64, noarch, ppc64le, s390x, x86_64\n\n3. \n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat\nEnterprise Linux 8.6 Release Notes linked from the References section. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory                           GLSA 202208-20\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n                                           https://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: High\n    Title: Apache HTTPD: Multiple Vulnerabilities\n     Date: August 14, 2022\n     Bugs: #813429, #816399, #816864, #829722, #835131, #850622\n       ID: 202208-20\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n=======\nMultiple vulnerabilities have been discovered in Apache Webserver, the\nworst of which could result in remote code execution. Please\nreview the CVE identifiers referenced below for details. \n\nImpact\n=====\nPlease review the referenced CVE identifiers for details. \n\nWorkaround\n=========\nThere is no known workaround at this time. \n\nResolution\n=========\nAll Apache HTTPD users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=www-servers/apache-2.4.54\"\n\nAll Apache HTTPD tools users should upgrade to the latest version:\n\n  # emerge --sync\n  # emerge --ask --oneshot --verbose \"\u003e=app-admin/apache-tools-2.4.54\"\n\nReferences\n=========\n[ 1 ] CVE-2021-33193\n      https://nvd.nist.gov/vuln/detail/CVE-2021-33193\n[ 2 ] CVE-2021-34798\n      https://nvd.nist.gov/vuln/detail/CVE-2021-34798\n[ 3 ] CVE-2021-36160\n      https://nvd.nist.gov/vuln/detail/CVE-2021-36160\n[ 4 ] CVE-2021-39275\n      https://nvd.nist.gov/vuln/detail/CVE-2021-39275\n[ 5 ] CVE-2021-40438\n      https://nvd.nist.gov/vuln/detail/CVE-2021-40438\n[ 6 ] CVE-2021-41524\n      https://nvd.nist.gov/vuln/detail/CVE-2021-41524\n[ 7 ] CVE-2021-41773\n      https://nvd.nist.gov/vuln/detail/CVE-2021-41773\n[ 8 ] CVE-2021-42013\n      https://nvd.nist.gov/vuln/detail/CVE-2021-42013\n[ 9 ] CVE-2021-44224\n      https://nvd.nist.gov/vuln/detail/CVE-2021-44224\n[ 10 ] CVE-2021-44790\n      https://nvd.nist.gov/vuln/detail/CVE-2021-44790\n[ 11 ] CVE-2022-22719\n      https://nvd.nist.gov/vuln/detail/CVE-2022-22719\n[ 12 ] CVE-2022-22720\n      https://nvd.nist.gov/vuln/detail/CVE-2022-22720\n[ 13 ] CVE-2022-22721\n      https://nvd.nist.gov/vuln/detail/CVE-2022-22721\n[ 14 ] CVE-2022-23943\n      https://nvd.nist.gov/vuln/detail/CVE-2022-23943\n[ 15 ] CVE-2022-26377\n      https://nvd.nist.gov/vuln/detail/CVE-2022-26377\n[ 16 ] CVE-2022-28614\n      https://nvd.nist.gov/vuln/detail/CVE-2022-28614\n[ 17 ] CVE-2022-28615\n      https://nvd.nist.gov/vuln/detail/CVE-2022-28615\n[ 18 ] CVE-2022-29404\n      https://nvd.nist.gov/vuln/detail/CVE-2022-29404\n[ 19 ] CVE-2022-30522\n      https://nvd.nist.gov/vuln/detail/CVE-2022-30522\n[ 20 ] CVE-2022-30556\n      https://nvd.nist.gov/vuln/detail/CVE-2022-30556\n[ 21 ] CVE-2022-31813\n      https://nvd.nist.gov/vuln/detail/CVE-2022-31813\n\nAvailability\n===========\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n https://security.gentoo.org/glsa/202208-20\n\nConcerns?\n========\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n======\nCopyright 2022 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttps://creativecommons.org/licenses/by-sa/2.5\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "db": "PACKETSTORM",
        "id": "168565"
      },
      {
        "db": "PACKETSTORM",
        "id": "169132"
      },
      {
        "db": "PACKETSTORM",
        "id": "167073"
      },
      {
        "db": "PACKETSTORM",
        "id": "168072"
      }
    ],
    "trust": 2.97
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2021-36160",
        "trust": 3.9
      },
      {
        "db": "PACKETSTORM",
        "id": "168072",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "168565",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "167073",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205",
        "trust": 0.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "169541",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "164329",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "164318",
        "trust": 0.7
      },
      {
        "db": "CS-HELP",
        "id": "SB2022012041",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2022051150",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021092301",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021101101",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021091707",
        "trust": 0.6
      },
      {
        "db": "CS-HELP",
        "id": "SB2021101513",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4004.3",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4004.2",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3357",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3387",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4004.7",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3591",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3229",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3248",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3489",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.4004.5",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2021.3148",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "169540",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "164305",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "169132",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "db": "PACKETSTORM",
        "id": "168565"
      },
      {
        "db": "PACKETSTORM",
        "id": "169132"
      },
      {
        "db": "PACKETSTORM",
        "id": "167073"
      },
      {
        "db": "PACKETSTORM",
        "id": "168072"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "id": "VAR-202109-1804",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      }
    ],
    "trust": 1.325
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      }
    ]
  },
  "last_update_date": "2024-07-23T19:28:18.167000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "FEDORA-2021-e3f6dd670d",
        "trust": 0.8,
        "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
      },
      {
        "title": "Patch for Apache HTTP Server Denial of Service Vulnerability (CNVD-2022-03205)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/313441"
      },
      {
        "title": "Apache HTTP Server Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqbyid.tag?id=163990"
      },
      {
        "title": "Red Hat: Moderate: httpd:2.4 security and bug fix update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20221915 - security advisory"
      },
      {
        "title": "Red Hat: CVE-2021-36160",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_cve_database\u0026qid=cve-2021-36160"
      },
      {
        "title": "Debian Security Advisories: DSA-4982-1 apache2 -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=93a29f7ecf9a6aaba79d3b3320aa4b85"
      },
      {
        "title": "Red Hat: Moderate: httpd24-httpd security and bug fix update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories\u0026qid=rhsa-20226753 - security advisory"
      },
      {
        "title": "Arch Linux Issues: ",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=arch_linux_issues\u0026qid=cve-2021-36160 log"
      },
      {
        "title": "Amazon Linux AMI: ALAS-2021-1543",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami\u0026qid=alas-2021-1543"
      },
      {
        "title": "Cisco: Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-apache-httpd-2.4.49-vwl69swq"
      },
      {
        "title": "Amazon Linux 2: ALAS2-2021-1716",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=amazon_linux2\u0026qid=alas2-2021-1716"
      },
      {
        "title": "",
        "trust": 0.1,
        "url": "https://github.com/pierrechrd/py-projet-tut "
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-125",
        "trust": 1.1
      },
      {
        "problemtype": "Out-of-bounds read (CWE-125) [NVD Evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-36160"
      },
      {
        "trust": 1.9,
        "url": "https://security.gentoo.org/glsa/202208-20"
      },
      {
        "trust": 1.8,
        "url": "https://security.netapp.com/advisory/ntap-20211008-0004/"
      },
      {
        "trust": 1.8,
        "url": "https://www.debian.org/security/2021/dsa-4982"
      },
      {
        "trust": 1.8,
        "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
      },
      {
        "trust": 1.8,
        "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00016.html"
      },
      {
        "trust": 1.2,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apache-httpd-2.4.49-vwl69swq"
      },
      {
        "trust": 1.2,
        "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
      },
      {
        "trust": 1.2,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-apache-"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a%40%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d%40%3ccvs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70%40%3ccvs.httpd.apache.org%3e"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/spbr6wuybjnachke65spl7tjohx7rhwd/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/zncysr3bxt36fff4xtcpl3hdqk4vp45r/"
      },
      {
        "trust": 0.9,
        "url": "https://access.redhat.com/security/cve/cve-2021-36160"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/spbr6wuybjnachke65spl7tjohx7rhwd/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/zncysr3bxt36fff4xtcpl3hdqk4vp45r/"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-33193"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-34798"
      },
      {
        "trust": 0.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-39275"
      },
      {
        "trust": 0.6,
        "url": "httpd.apache.org%3e"
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "httpd.apache.org/security/vulnerabilities_24.html"
      },
      {
        "trust": 0.6,
        "url": "http://"
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3cusers."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70@%3ccvs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3cusers."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a@%3cbugs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3cusers."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d@%3ccvs."
      },
      {
        "trust": 0.6,
        "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3cusers."
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3229"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021101513"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/169541/red-hat-security-advisory-2022-7143-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3357"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3591"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/168072/gentoo-linux-security-advisory-202208-20.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4004.7"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164318/ubuntu-security-notice-usn-5090-3.html"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/168565/red-hat-security-advisory-2022-6753-01.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4004.3"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4004.2"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.4004.5"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021092301"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3387"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/164329/ubuntu-security-notice-usn-5090-4.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3248"
      },
      {
        "trust": 0.6,
        "url": "httpd-2.4.49-vwl69swq"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022051150"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3148"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2021.3489"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2022012041"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021091707"
      },
      {
        "trust": 0.6,
        "url": "https://www.cybersecurity-help.cz/vdb/sb2021101101"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/apache-http-server-four-vulnerabilities-36444"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/167073/red-hat-security-advisory-2022-1915-01.html"
      },
      {
        "trust": 0.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-40438"
      },
      {
        "trust": 0.3,
        "url": "https://ubuntu.com/security/notices/usn-5090-1"
      },
      {
        "trust": 0.3,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-44224"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a@%3cbugs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70@%3ccvs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d@%3ccvs.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3cusers.httpd.apache.org%3e"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/errata/rhsa-2022:1915"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-22721"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/articles/11258"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-28614"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-29404"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/team/key/"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-28615"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-30522"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/team/contact/"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-22719"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-30556"
      },
      {
        "trust": 0.2,
        "url": "https://bugzilla.redhat.com/):"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-23943"
      },
      {
        "trust": 0.2,
        "url": "https://listman.redhat.com/mailman/listinfo/rhsa-announce"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2021-44224"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/cve/cve-2021-33193"
      },
      {
        "trust": 0.2,
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "trust": 0.2,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-26377"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/125.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.29-1ubuntu4.17"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.5"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.46-4ubuntu1.2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/bugs/xxxxxx"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-5090-4"
      },
      {
        "trust": 0.1,
        "url": "https://ubuntu.com/security/notices/usn-5090-3"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.6"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/bugs/1945311"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.29-1ubuntu4.18"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/apache2/2.4.46-4ubuntu1.3"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/articles/6975397"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-30556"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-39275"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-22719"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-28614"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/errata/rhsa-2022:6753"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2021-34798"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-28615"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-31813"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-30522"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-22721"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-29404"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-23943"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2022-26377"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/apache2"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2020-35452"
      },
      {
        "trust": 0.1,
        "url": "https://access.redhat.com/security/cve/cve-2020-35452"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-31813"
      },
      {
        "trust": 0.1,
        "url": "https://bugs.gentoo.org."
      },
      {
        "trust": 0.1,
        "url": "https://creativecommons.org/licenses/by-sa/2.5"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-44790"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-41773"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-41524"
      },
      {
        "trust": 0.1,
        "url": "https://security.gentoo.org/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2021-42013"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2022-22720"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "db": "PACKETSTORM",
        "id": "168565"
      },
      {
        "db": "PACKETSTORM",
        "id": "169132"
      },
      {
        "db": "PACKETSTORM",
        "id": "167073"
      },
      {
        "db": "PACKETSTORM",
        "id": "168072"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "db": "PACKETSTORM",
        "id": "168565"
      },
      {
        "db": "PACKETSTORM",
        "id": "169132"
      },
      {
        "db": "PACKETSTORM",
        "id": "167073"
      },
      {
        "db": "PACKETSTORM",
        "id": "168072"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "date": "2021-09-16T00:00:00",
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "date": "2021-09-16T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "date": "2021-09-29T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "date": "2021-09-28T15:06:35",
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "date": "2021-09-29T14:50:01",
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "date": "2021-09-28T15:23:06",
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "date": "2022-09-30T14:51:18",
        "db": "PACKETSTORM",
        "id": "168565"
      },
      {
        "date": "2021-10-28T19:12:00",
        "db": "PACKETSTORM",
        "id": "169132"
      },
      {
        "date": "2022-05-11T16:37:39",
        "db": "PACKETSTORM",
        "id": "167073"
      },
      {
        "date": "2022-08-15T16:02:48",
        "db": "PACKETSTORM",
        "id": "168072"
      },
      {
        "date": "2021-09-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "date": "2021-09-16T15:15:07.330000",
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2022-01-13T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2022-03205"
      },
      {
        "date": "2022-10-18T00:00:00",
        "db": "VULHUB",
        "id": "VHN-397448"
      },
      {
        "date": "2022-08-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2021-36160"
      },
      {
        "date": "2021-09-29T06:16:00",
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      },
      {
        "date": "2022-10-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      },
      {
        "date": "2023-11-07T03:36:43.407000",
        "db": "NVD",
        "id": "CVE-2021-36160"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "164305"
      },
      {
        "db": "PACKETSTORM",
        "id": "164329"
      },
      {
        "db": "PACKETSTORM",
        "id": "164318"
      },
      {
        "db": "PACKETSTORM",
        "id": "168072"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      }
    ],
    "trust": 1.0
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Apache\u00a0HTTP\u00a0Server\u00a0 In \u00a0mod_proxy_uwsgi\u00a0 Vulnerability in which is read beyond the allocated memory",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2021-002672"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202109-1113"
      }
    ],
    "trust": 0.6
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2021-36160"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-125"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2021-09-16T15:15:00Z",
    "severity": "HIGH"
  },
  "details": "A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).",
  "id": "GHSA-f4wr-wvqf-r2q5",
  "modified": "2022-05-24T19:14:50Z",
  "published": "2022-05-24T19:14:50Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-36160"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpujan2022.html"
    },
    {
      "type": "WEB",
      "url": "https://www.oracle.com/security-alerts/cpuapr2022.html"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2021/dsa-4982"
    },
    {
      "type": "WEB",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20211008-0004"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/202208-20"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/10/msg00016.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2021/09/msg00016.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/ree7519d71415ecdd170ff1889cab552d71758d2ba2904a17ded21a70@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/re4162adc051c1a0a79e7a24093f3776373e8733abaff57253fef341d@%3Ccvs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/rb2341c8786d0f9924f5b666e82d8d170b4804f50a523d750551bef1a@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/ra87a69d0703d09dc52b86e32b08f8d7327af10acdd5f577a4e82596a@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/ra1c05a392587bfe34383dffe1213edc425de8d4afc25b7cefab3e781@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r94a61a1517133a19dcf40016e87454ea86e355d06a0cec4c778530f3@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r7f2746e916ed370239bc1a1025e5ebbf345f79df9ea0ea39e44acfbb@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r73260f6ba9fb52e43d860905fc90462ba5a814afda2d011f32bbd41c@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3Cbugs.httpd.apache.org%3E"
    },
    {
      "type": "WEB",
      "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}