CVE-2024-24795
Apache HTTP Server: HTTP Response Splitting in multiple modules
Résumé
Apache HTTP Server: HTTP Response Splitting in multiple modules
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.
Users are recommended to upgrade to version 2.4.59, which fixes this issue.
Paquets affectés
Bitnami
apache
[{"type":"SEMVER","events":[{"introduced":"2.4.0"},{"fixed":"2.4.59"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2024-24795 apache2 Corrigé dans: 2.4.59-r0
- Debian DEBIAN-CVE-2024-24795 apache2 Corrigé dans: 2.4.59-1~deb11u1
- Ubuntu UBUNTU-CVE-2024-24795 apache2 Corrigé dans: 2.4.7-1ubuntu4.22+esm12
Références
- advisory httpd.apache.org
- advisory lists.fedoraproject.org
- advisory security.netapp.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.debian.org
- advisory lists.debian.org
- advisory support.apple.com
- web openwall.com
- web seclists.org
- web nvd.nist.gov