Lucene search
GoogleOSV:ALSA-2024:3121HistoryMay 22, 2024 - 12:00 a.m.
Moderate: httpd:2.4 security update
2024-05-2200:00:00
Google
osv.dev
1
apache http server
mod_macro
mod_http2
out-of-bounds read vulnerability
exhaust memory
cve-2023-31122
cve-2023-45802
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.732 High
EPSS
Percentile
98.1%
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
- httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)
- mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Related
nessus
nessus
EulerOS 2.0 SP11 : httpd (EulerOS-SA-2023-3245)
2024-01-16 00:00:00
EulerOS Virtualization 2.9.1 : httpd (EulerOS-SA-2024-1036)
2024-01-16 00:00:00
EulerOS Virtualization 3.0.6.0 : httpd (EulerOS-SA-2024-1684)
2024-05-17 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1061)
2024-01-09 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2023-3334)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-1010)
2024-01-05 00:00:00
almalinux
almalinux
Moderate: httpd:2.4 security update
2024-05-22 00:00:00
Moderate: mod_http2 security update
2024-04-30 00:00:00
Moderate: httpd security update
2024-04-30 00:00:00
rocky
rocky
httpd:2.4 security update
2024-06-14 13:59:30
httpd security update
2024-05-10 14:32:42
osv
osv
Moderate: httpd:2.4 security update
2024-06-14 13:59:30
CVE-2023-45802
2023-10-23 07:15:11
BIT-2023-45802
2023-11-02 07:16:21
redhat
redhat
(RHSA-2024:3121) Moderate: httpd:2.4 security update
2024-05-22 06:35:40
(RHSA-2024:2368) Moderate: mod_http2 security update
2024-04-30 06:15:30
(RHSA-2024:2891) Moderate: httpd:2.4 security update
2024-05-16 11:37:17
ibm
ibm
mageia
mageia
Updated apache packages fix security vulnerabilities
2023-10-28 00:49:40
oraclelinux
oraclelinux
httpd:2.4 security update
2024-05-24 00:00:00
httpd security update
2024-05-03 00:00:00
mod_http2 security update
2024-05-02 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: mod_http2-2.0.25-1.fc38
2023-10-24 01:23:54
[SECURITY] Fedora 39 Update: mod_http2-2.0.25-1.fc39
2023-11-07 01:40:03
[SECURITY] Fedora 37 Update: mod_http2-2.0.25-1.fc37
2023-11-07 02:32:37
cvelist
cvelist
CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST
2023-10-23 06:50:23
CVE-2023-31122 Apache HTTP Server: mod_macro buffer over-read
2023-10-23 06:51:59
nvd
nvd
CVE-2023-45802
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
redhatcve
redhatcve
CVE-2023-45802
2023-10-19 19:44:57
CVE-2023-31122
2023-10-21 01:51:13
alpinelinux
alpinelinux
CVE-2023-45802
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
debiancve
debiancve
CVE-2023-45802
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
ubuntucve
ubuntucve
CVE-2023-45802
2023-10-23 00:00:00
CVE-2023-31122
2023-10-23 00:00:00
attackerkb
attackerkb
CVE-2023-44487
2023-10-10 00:00:00
cve
cve
CVE-2023-45802
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
prion
prion
Design/Logic Flaw
2023-10-23 07:15:00
Cross site scripting
2023-10-23 07:15:00
f5
f5
K000137327 : Apache mod_http2 vulnerability CVE-2023-45802
2023-10-23 00:00:00
K000137326 : Apache mod_macro vulnerability CVE-2023-31122
2023-10-23 00:00:00
amazon
amazon
Important: httpd24
2023-10-30 23:31:00
Important: httpd
2023-10-30 23:59:00
Important: nghttp2
2023-10-16 13:45:00
slackware
slackware
[slackware-security] httpd
2023-10-19 19:21:22
kaspersky
kaspersky
KLA61504 Multiple vulnerabilities in Apache HTTP Server
2023-10-19 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2023-10-19 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2023-11-22 00:00:00
Apache HTTP Server vulnerability
2023-11-23 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0502
2023-11-01 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0680
2023-11-03 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2326
2024-01-23 12:20:08
veracode
veracode
Out-of-bounds Read
2023-10-20 06:57:49
Denial Of Service (DoS)
2023-10-20 07:48:32
cnvd
cnvd
Apache HTTP Server Buffer Overflow Vulnerability (CNVD-2023-93320)
2023-10-28 00:00:00
cbl_mariner
cbl_mariner
redos
redos
ROS-20231030-01
2023-10-30 00:00:00
debian
debian
[SECURITY] [DLA 3818-1] apache2 security update
2024-05-25 11:06:45
[SECURITY] [DSA 5662-1] apache2 security update
2024-04-16 18:32:07
[SECURITY] [DLA 3638-1] h2o security update
2023-10-31 14:09:23
atlassian
atlassian
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.2 High
AI Score
Confidence
Low
0.732 High
EPSS
Percentile
98.1%
Related for OSV:ALSA-2024:3121