Lucene search
GoogleOSV:SUSE-SU-2024:2597-1HistoryJul 23, 2024 - 7:04 a.m.
Security update for apache2
2024-07-2307:04:00
Google
osv.dev
1
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
This update for apache2 fixes the following issues:
- CVE-2024-36387: Fixed DoS by null pointer in websocket over HTTP/2 (bsc#1227272)
- CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268)
- CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect (bsc#1227269)
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : apache2 (SUSE-SU-2024:2597-1)
2024-07-25 00:00:00
SUSE SLES15 Security Update : apache2 (SUSE-SU-2024:2591-1)
2024-07-23 00:00:00
Debian dsa-5729 : apache2 - security update
2024-07-12 00:00:00
osv
osv
Security update for apache2
2024-07-22 12:41:41
apache2 - security update
2024-07-11 00:00:00
apache2 vulnerabilities
2024-09-18 09:36:05
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2591-1)
2024-07-23 00:00:00
Debian: Security Advisory (DSA-5729-1)
2024-07-12 00:00:00
Apache HTTP Server < 2.4.60 Multiple Vulnerabilities - Linux
2024-07-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
amazon
amazon
Important: httpd24
2024-07-17 22:27:00
Important: httpd
2024-07-18 02:00:00
debiancve
debiancve
fedora
fedora
[SECURITY] Fedora 39 Update: mod_http2-2.0.29-1.fc39
2024-07-27 13:48:58
[SECURITY] Fedora 40 Update: mod_http2-2.0.29-1.fc40
2024-07-27 01:47:02
[SECURITY] Fedora 39 Update: httpd-2.4.61-1.fc39
2024-07-19 02:21:50
cbl_mariner
cbl_mariner
CVE-2024-36387 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
CVE-2024-36387 affecting package httpd for versions less than 2.4.62-1
2024-07-26 17:52:50
cvelist
cvelist
f5
f5
K000140581: Apache mod_proxy vulnerability CVE-2024-36387
2024-08-05 00:00:00
alpinelinux
alpinelinux
redhatcve
redhatcve
vulnrichment
vulnrichment
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00
Apache HTTP Server regression
2024-07-11 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
ubuntucve
ubuntucve
nvd
nvd
cve
cve
redos
redos
ROS-20240801-01
2024-08-01 00:00:00
hackerone
hackerone
githubexploit
githubexploit
Exploit for CVE-2024-38475
2024-08-18 11:30:50
redhat
redhat
(RHSA-2024:6584) Important: httpd security update
2024-09-11 11:09:41
(RHSA-2024:5832) Important: httpd security update
2024-08-26 07:22:27
(RHSA-2024:5138) Important: httpd security update
2024-08-08 14:16:09
veracode
veracode
Server Side Request Forgery (SSRF)
2024-07-09 06:07:25
rocky
rocky
httpd security update
2024-08-21 14:53:29
httpd:2.4 security update
2024-08-21 14:52:31
httpd security update
2024-07-26 12:33:59
oraclelinux
oraclelinux
httpd security update
2024-08-08 00:00:00
httpd:2.4 security update
2024-08-13 00:00:00
httpd security update
2024-09-13 00:00:00
almalinux
almalinux
Important: httpd:2.4 security update
2024-08-12 00:00:00
Important: httpd security update
2024-08-08 00:00:00
Important: httpd security update
2024-07-23 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0651
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
Related for OSV:SUSE-SU-2024:2597-1