Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-38477
HistoryJul 01, 2024 - 7:15 p.m.

CVE-2024-38477

2024-07-0119:15:05
Alpine Linux Development Team
security.alpinelinux.org
1
cve-2024-38477
mod_proxy
crash
upgrade
version 2.4.60
unix

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.
Users are recommended to upgrade to version 2.4.60, which fixes this issue.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%