Lucene search
GoogleOSV:CVE-2024-38477HistoryJul 01, 2024 - 7:15 p.m.
CVE-2024-38477
2024-07-0119:15:05
Google
osv.dev
2
apache http server
null pointer
vulnerability
fix
upgrade
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
48.0%
null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.
Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Related
f5
f5
K000140784: Apache HTTPD vulnerability CVE-2024-38477
2024-08-23 00:00:00
osv
osv
BIT-apache-2024-38477
2024-07-03 07:16:30
Security update for apache2
2024-07-11 08:21:20
Security update for apache2
2024-07-12 13:12:00
veracode
veracode
NULL Pointer Dereference
2024-07-09 06:07:13
vulnrichment
vulnrichment
nessus
nessus
F5 Networks BIG-IP : Apache HTTPD vulnerability (K000140784)
2024-08-23 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:2405-1)
2024-07-12 00:00:00
Oracle Linux 7 : httpd (ELSA-2024-4943)
2024-09-13 00:00:00
cvelist
cvelist
debiancve
debiancve
CVE-2024-38477
2024-07-01 19:15:05
nvd
nvd
CVE-2024-38477
2024-07-01 19:15:05
ubuntucve
ubuntucve
CVE-2024-38477
2024-07-01 00:00:00
hackerone
hackerone
redhatcve
redhatcve
CVE-2024-38477
2024-07-01 21:49:48
alpinelinux
alpinelinux
CVE-2024-38477
2024-07-01 19:15:05
cve
cve
CVE-2024-38477
2024-07-01 19:15:05
oraclelinux
oraclelinux
httpd security update
2024-09-13 00:00:00
httpd security update
2024-07-23 00:00:00
httpd:2.4 security update
2024-07-23 00:00:00
redhat
redhat
(RHSA-2024:4820) Important: httpd:2.4 security update
2024-07-24 12:32:35
(RHSA-2024:4719) Important: httpd:2.4 security update
2024-07-23 08:05:55
(RHSA-2024:4830) Important: httpd:2.4 security update
2024-07-24 12:41:40
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2436-1)
2024-08-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2624-1)
2024-07-31 00:00:00
Ubuntu: Security Advisory (USN-6885-3)
2024-09-19 00:00:00
amazon
amazon
Important: httpd24
2024-07-17 22:27:00
Important: httpd
2024-07-18 02:00:00
almalinux
almalinux
Important: httpd security update
2024-07-23 00:00:00
Important: httpd:2.4 security update
2024-07-23 00:00:00
rocky
rocky
httpd security update
2024-07-26 12:33:59
fedora
fedora
[SECURITY] Fedora 39 Update: httpd-2.4.61-1.fc39
2024-07-19 02:21:50
[SECURITY] Fedora 40 Update: httpd-2.4.61-1.fc40
2024-07-09 01:55:52
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
ibm
ibm
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
ubuntu
ubuntu
Apache HTTP Server regression
2024-07-11 00:00:00
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
Low
EPSS
0.001
Percentile
48.0%
Related for OSV:CVE-2024-38477