AZL-65217 CVE-2024-43204 affecting package httpd for versions less than 2.4.64-1

🗓️ 10 Jul 2025 17:15:45Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Apache HTTP Server SSRF via mod_proxy when Content-Type is altered; affected versions below 2.4.64-1; upgrade to 2.4.64.

Reporter	Title	Published	Views	Family All 161
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.	3 Oct 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin:IBM HTTP Server shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	21 Oct 202518:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.	3 Nov 202509:06	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2024-43204, CVE-2024-43394, CVE-2024-42516)	11 Aug 202513:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-43204, CVE-2024-43394, CVE-2024-42516 , CVE-2025-54090]	18 Aug 202511:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager	18 Aug 202506:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache HTTP Server	12 Aug 202516:38	–	ibm
FreeBSD	Apache httpd -- Multiple vulnerabilities	10 Jul 202500:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2025-1125)	4 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2025-2958)	4 Aug 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-43204

21 Apr 2026 04:37Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00705

SSVC