Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-24795
HistoryApr 04, 2024 - 8:15 p.m.

CVE-2024-24795

2024-04-0420:15:08
Alpine Linux Development Team
security.alpinelinux.org
18
cve-2024-24795
http response splitting
apache http server
upgrade
http desynchronization attack
unix
backend applications

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.0%

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.

Users are recommended to upgrade to version 2.4.59, which fixes this issue.