CVE-2024-24795

🗓️ 04 Apr 2024 19:20:48Reported by apacheType

HTTP response splitting vulnerability in Apache HTTP Serve

Reporter	Title	Published	Views	Family All 196
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting attacks [CVE-2023-38709, CVE-2024-24795].	22 Jul 202420:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)	12 Jul 202415:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server	27 Jun 202419:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-38709, CVE-2024-24795)	10 Apr 202418:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-24795, CVE-2023-38709]	25 Jun 202412:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to HTTP response splitting due to the included Apache HTTP Server (CVE-2024-24795, CVE-2023-38709)	5 Sep 202418:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server affect IBM Business Automation Workflow (CVE-2024-24795, CVE-2023-38709)	17 Apr 202415:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple HTTP vulnerabilities (CVE-2022-43841, CVE-2024-24795, CVE-2023-38709)	29 May 202420:37	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server, which is used by IBM WebSphere Application Server in IBM Rational ClearQuest (CVE-2024-24795, CVE-2023-38709)	22 Apr 202411:02	–	ibm
FreeBSD	Apache httpd -- multiple vulnerabilities	4 Apr 202400:00	–	freebsd

NVD

Vulners

Node

apache http_serverRange2.4.0–2.4.59

Node

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch38

fedoraproject fedoraMatch39

fedoraproject fedoraMatch40

Node

netapp ontapMatch9

netapp ontap_toolsMatch10vmware_vsphere

broadcom fabric_operating_systemMatch-

Node

apple macosRange<14.6

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.58",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00013.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/
seclists	www.seclists.org/fulldisclosure/2024/Jul/18
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/
support	www.support.apple.com/kb/HT214119
security	www.security.netapp.com/advisory/ntap-20240415-0013/
lists	www.lists.debian.org/debian-lts-announce/2024/05/msg00014.html
openwall	www.openwall.com/lists/oss-security/2024/04/04/5

30 Jun 2025 12:55Current

7High risk

Vulners AI Score7

CVSS 3.16.3

EPSS0.01123

SSVC