apache2 vulnerabilities

2024-04-2911:31:21

Google

osv.dev

usn-6729-1

apache http server

ubuntu 24.04 lts

input validation

http request splitting attacks

cve-2023-38709

cve-2024-24795

cve-2024-27316

denial of service

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.0%

JSON

USN-6729-1 fixed vulnerabilities in Apache HTTP Server. This update
provides the corresponding updates for Ubuntu 24.04 LTS.

Original advisory details:

Orange Tsai discovered that the Apache HTTP Server incorrectly handled
validating certain input. A remote attacker could possibly use this
issue to perform HTTP request splitting attacks. (CVE-2023-38709)

Keran Mu and Jianjun Chen discovered that the Apache HTTP Server
incorrectly handled validating certain input. A remote attacker could
possibly use this issue to perform HTTP request splitting attacks.
(CVE-2024-24795)

Bartek Nowotarski discovered that the Apache HTTP Server HTTP/2 module
incorrectly handled endless continuation frames. A remote attacker could
possibly use this issue to cause the server to consume resources, leading
to a denial of service. (CVE-2024-27316)