CVE-2023-38709

🗓️ 04 Apr 2024 19:19:35Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 4895 Views

Faulty input validation in Apache HTTP Serve

Reporter	Title	Published	Views	Family All 238
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting attacks [CVE-2023-38709, CVE-2024-24795].	22 Jul 202420:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)	12 Jul 202415:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server	27 Jun 202419:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	22 May 202521:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-38709, CVE-2024-24795)	10 Apr 202418:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-24795, CVE-2023-38709]	25 Jun 202412:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to HTTP response splitting due to the included Apache HTTP Server (CVE-2024-24795, CVE-2023-38709)	5 Sep 202418:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2024-24795, CVE-2023-38709)	17 Apr 202415:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple HTTP vulnerabilities (CVE-2022-43841, CVE-2024-24795, CVE-2023-38709)	29 May 202420:37	–	ibm

NVD

Vulners

Vulnrichment

Node

apache http_serverRange<2.4.59

Node

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch38

fedoraproject fedoraMatch39

fedoraproject fedoraMatch40

Node

netapp ontapMatch9

netapp ontap_toolsMatch10vmware_vsphere

broadcom fabric_operating_systemMatch-

Node

apple macosRange<14.6

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.58",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240415-0013/
support	www.support.apple.com/kb/HT214119
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00013.html
seclists	www.seclists.org/fulldisclosure/2024/Jul/18
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/
openwall	www.openwall.com/lists/oss-security/2024/04/04/3
openwall	www.openwall.com/lists/oss-security/2025/07/10/2

04 Nov 2025 22:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.3

EPSS0.04358

SSVC

CWE-1284