OESA-2023-1804 httpd security update

🗓️ 10 Nov 2023 11:06:15Reported by GoogleType

osv🔗 osv.dev👁 3 Views

OESA-2023-1804 fixes an out-of-bounds read in mod_macro and a reset memory leak in HTTP/2; upgrade to version 2.4.58.

Reporter	Title	Published	Views	Family All 289
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to information disclosure due to the included Apache HTTP Server (CVE-2023-31122)	25 Oct 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2023-31122]	6 Mar 202406:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2023-45802) affects Power HMC.	14 Dec 202412:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	11 Mar 202519:26	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-31122)	6 Nov 202314:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Apr 202413:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)	16 Feb 202421:57	–	ibm
GithubExploit	Exploit for Improper Resource Shutdown or Release in Apache Http_Server	19 Apr 202619:34	–	githubexploit
ATTACKERKB	CVE-2023-44487	10 Oct 202300:00	–	attackerkb

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-31122
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-45802

03 Sep 2025 06:19Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.5

EPSS0.02793

SSVC