Lucene search
GoogleOSV:SUSE-SU-2024:2436-1HistoryJul 12, 2024 - 1:12 p.m.
Security update for apache2
2024-07-1213:12:00
Google
osv.dev
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.3
Confidence
Low
This update for apache2 fixes the following issues:
Security fixes:
- CVE-2024-38477: Fixed null pointer dereference in mod_proxy (bsc#1227270)
- CVE-2024-39573: Fixed potential SSRF in mod_rewrite (bsc#1227271)
- CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268)
Other fixes:
- Fixed regression of security fix (bsc#1226217)
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2436-1)
2024-08-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2624-1)
2024-07-31 00:00:00
Fedora: Security Advisory (FEDORA-2024-39f1a828ed)
2024-09-10 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:2624-1)
2024-07-31 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:2405-1)
2024-07-12 00:00:00
Rocky Linux 9 : httpd (RLSA-2024:4726)
2024-07-26 00:00:00
osv
osv
Security update for apache2
2024-07-30 07:04:58
Security update for apache2
2024-07-11 08:21:20
Important: httpd:2.4 security update
2024-07-23 00:00:00
rocky
rocky
httpd security update
2024-07-26 12:33:59
redhat
redhat
(RHSA-2024:4720) Important: httpd:2.4 security update
2024-07-23 08:15:17
(RHSA-2024:4726) Important: httpd security update
2024-07-23 12:57:04
almalinux
almalinux
Important: httpd security update
2024-07-23 00:00:00
Important: httpd:2.4 security update
2024-07-23 00:00:00
oraclelinux
oraclelinux
httpd security update
2024-07-23 00:00:00
httpd:2.4 security update
2024-07-23 00:00:00
httpd security update
2024-09-13 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: httpd-2.4.61-1.fc40
2024-07-09 01:55:52
[SECURITY] Fedora 39 Update: httpd-2.4.61-1.fc39
2024-07-19 02:21:50
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
ibm
ibm
amazon
amazon
Important: httpd
2024-07-18 02:00:00
Important: httpd24
2024-07-17 22:27:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0651
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
cvelist
cvelist
nvd
nvd
vulnrichment
vulnrichment
redhatcve
redhatcve
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
ubuntu
ubuntu
Apache HTTP Server regression
2024-07-11 00:00:00
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
redos
redos
ROS-20240801-01
2024-08-01 00:00:00
ROS-20240812-15
2024-08-12 00:00:00
alpinelinux
alpinelinux
hackerone
hackerone
Internet Bug Bounty: important: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. (CVE-2024-38475)
2024-07-03 06:58:50
debiancve
debiancve
cve
cve
f5
f5
K000140693: Apache HTTP server vulnerability CVE-2024-39573
2024-08-13 00:00:00
K000140784: Apache HTTPD vulnerability CVE-2024-38477
2024-08-23 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-38475
2024-08-18 11:30:50
veracode
veracode
NULL Pointer Dereference
2024-07-09 06:07:13
ubuntucve
ubuntucve
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
7.3
Confidence
Low
Related for OSV:SUSE-SU-2024:2436-1