Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-38476HistoryJul 01, 2024 - 7:15 p.m.
CVE-2024-38476
2024-07-0119:15:04
Debian Security Bug Tracker
security-tracker.debian.org
4
cve-2024-38476
information disclosure
ssrf
local script execution
upgrade
unix
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | <= 2.4.59-1~deb12u1 | apache2_2.4.59-1~deb12u1_all.deb |
| Debian | 11 | all | apache2 | <= 2.4.59-1~deb11u1 | apache2_2.4.59-1~deb11u1_all.deb |
| Debian | 999 | all | apache2 | < 2.4.60-1 | apache2_2.4.60-1_all.deb |
| Debian | 13 | all | apache2 | <= 2.4.59-2 | apache2_2.4.59-2_all.deb |
Related
nvd
nvd
CVE-2024-38476
2024-07-01 19:15:04
ubuntucve
ubuntucve
CVE-2024-38476
2024-07-01 00:00:00
cvelist
cvelist
cve
cve
CVE-2024-38476
2024-07-01 19:15:04
osv
osv
BIT-apache-2024-38476
2024-07-03 07:16:44
alpinelinux
alpinelinux
CVE-2024-38476
2024-07-01 19:15:04
vulnrichment
vulnrichment
redhatcve
redhatcve
CVE-2024-38476
2024-07-02 17:32:58
openvas
openvas
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Linux
2024-07-01 00:00:00
Slackware: Security Advisory (SSA:2024-184-01)
2024-07-03 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Windows
2024-07-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
nessus
nessus
FreeBSD : Apache httpd -- Multiple vulnerabilities (d7efc2ad-37af-11ef-b611-84a93843eb75)
2024-07-02 00:00:00
Apache 2.4.x < 2.4.60 Multiple Vulnerabilities
2024-07-01 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48