Lucene search

RedHatRHSA-2024:3121

HistoryMay 22, 2024 - 6:35 a.m.

(RHSA-2024:3121) Moderate: httpd:2.4 security update

2024-05-2206:35:40

access.redhat.com

rhsa-2024-3121

moderate

apache http server

mod_macro

out-of-bounds read vulnerability

mod_http2

reset requests exhaust memory

cve-2023-31122

cve-2023-44487

cve-2023-45802

cvss score

red hat enterprise linux 8.10

6.9 Medium

AI Score

Confidence

Low

0.732 High

EPSS

Percentile

98.1%

JSON

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)
mod_http2: reset requests exhaust memory (incomplete fix of CVE-2023-44487) (CVE-2023-45802)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyx86_64mod_proxy_html< 2.4.37-64.module+el8.10.0+21332+dfb1b40emod_proxy_html-2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64.rpm
RedHatanys390xmod_http2-debugsource< 1.15.7-10.module+el8.10.0+21653+eaff63f0mod_http2-debugsource-1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x.rpm
RedHatanyaarch64mod_ldap-debuginfo< 2.4.37-64.module+el8.10.0+21332+dfb1b40emod_ldap-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHatanys390xhttpd-debugsource< 2.4.37-64.module+el8.10.0+21332+dfb1b40ehttpd-debugsource-2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x.rpm
RedHatanyaarch64mod_ssl< 2.4.37-64.module+el8.10.0+21332+dfb1b40emod_ssl-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHatanyaarch64httpd-tools-debuginfo< 2.4.37-64.module+el8.10.0+21332+dfb1b40ehttpd-tools-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHatanyaarch64httpd< 2.4.37-64.module+el8.10.0+21332+dfb1b40ehttpd-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHatanyx86_64mod_ssl< 2.4.37-64.module+el8.10.0+21332+dfb1b40emod_ssl-2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64.rpm
RedHatanyaarch64httpd-devel< 2.4.37-64.module+el8.10.0+21332+dfb1b40ehttpd-devel-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHatanyppc64lemod_ssl-debuginfo< 2.4.37-64.module+el8.10.0+21332+dfb1b40emod_ssl-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	x86_64	mod_proxy_html	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	mod_proxy_html-2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64.rpm
RedHat	any	s390x	mod_http2-debugsource	< 1.15.7-10.module+el8.10.0+21653+eaff63f0	mod_http2-debugsource-1.15.7-10.module+el8.10.0+21653+eaff63f0.s390x.rpm
RedHat	any	aarch64	mod_ldap-debuginfo	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	mod_ldap-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHat	any	s390x	httpd-debugsource	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	httpd-debugsource-2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x.rpm
RedHat	any	aarch64	mod_ssl	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	mod_ssl-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHat	any	aarch64	httpd-tools-debuginfo	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	httpd-tools-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHat	any	aarch64	httpd	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	httpd-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHat	any	x86_64	mod_ssl	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	mod_ssl-2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64.rpm
RedHat	any	aarch64	httpd-devel	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	httpd-devel-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64.rpm
RedHat	any	ppc64le	mod_ssl-debuginfo	< 2.4.37-64.module+el8.10.0+21332+dfb1b40e	mod_ssl-debuginfo-2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le.rpm

Rows per page:

1-10 of 821