CVE-2024-38477

🗓️ 01 Jul 2024 18:16:11Reported by apacheType

Null pointer dereference in Apache HTTP Serve

Reporter	Title	Published	Views	Family All 239
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to a denial of service CVE-2024-38477	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server	29 Jul 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities (CVE-2024-38477, CVE-2021-38963, CVE-2024-38475, CVE-2024-38474)	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in http-server affect Cloud Pak System	29 Oct 202410:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Apache HTTP, OpendJDK, python3 and spring-web affect IBM Cloud Object Storage Systems (Sept 2024v1)	19 Sep 202403:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2024-38477) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server.	26 Jul 202413:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.	5 Sep 202419:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to a remote attacker causing a denial of service, executing arbitrary code, and mapping URLs to filesystem locations due to multiple vulnerabilities.	1 Oct 202418:45	–	ibm

NVD

Vulners

Node

apache http_serverRange2.4.0–2.4.60

Node

netapp clustered_data_ontapMatch9.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.4.59",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240712-0001/
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
openwall	www.openwall.com/lists/oss-security/2024/07/01/10
seclists	www.seclists.org/fulldisclosure/2024/Oct/11

03 Nov 2025 22:17Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.5

EPSS0.01924

SSVC

CWE-476