Lucene search
RedHatRHSA-2024:4504HistoryJul 11, 2024 - 12:05 p.m.
(RHSA-2024:4504) Moderate: httpd security update
2024-07-1112:05:07
access.redhat.com
12
httpd
security update
mod_proxy_uwsgi
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
Low
EPSS
0.014
Percentile
86.4%
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
- httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | aarch64 | httpd-debuginfo | < 2.4.53-11.el9_2.6 | httpd-debuginfo-2.4.53-11.el9_2.6.aarch64.rpm |
| RedHat | 9 | x86_64 | mod_lua | < 2.4.53-11.el9_2.6 | mod_lua-2.4.53-11.el9_2.6.x86_64.rpm |
| RedHat | 9 | s390x | httpd-devel | < 2.4.53-11.el9_2.6 | httpd-devel-2.4.53-11.el9_2.6.s390x.rpm |
| RedHat | 9 | s390x | httpd-debugsource | < 2.4.53-11.el9_2.6 | httpd-debugsource-2.4.53-11.el9_2.6.s390x.rpm |
| RedHat | 9 | ppc64le | httpd-debugsource | < 2.4.53-11.el9_2.6 | httpd-debugsource-2.4.53-11.el9_2.6.ppc64le.rpm |
| RedHat | 9 | aarch64 | httpd-core-debuginfo | < 2.4.53-11.el9_2.6 | httpd-core-debuginfo-2.4.53-11.el9_2.6.aarch64.rpm |
| RedHat | 9 | x86_64 | mod_session-debuginfo | < 2.4.53-11.el9_2.6 | mod_session-debuginfo-2.4.53-11.el9_2.6.x86_64.rpm |
| RedHat | 9 | x86_64 | httpd-core-debuginfo | < 2.4.53-11.el9_2.6 | httpd-core-debuginfo-2.4.53-11.el9_2.6.x86_64.rpm |
| RedHat | 9 | aarch64 | mod_ssl-debuginfo | < 2.4.53-11.el9_2.6 | mod_ssl-debuginfo-2.4.53-11.el9_2.6.aarch64.rpm |
| RedHat | 9 | ppc64le | httpd-core-debuginfo | < 2.4.53-11.el9_2.6 | httpd-core-debuginfo-2.4.53-11.el9_2.6.ppc64le.rpm |
Related
osv
osv
CVE-2023-27522
2023-03-07 16:15:09
Moderate: httpd and mod_http2 security, bug fix, and enhancement update
2023-11-07 00:00:00
BIT-apache-2023-27522
2024-03-06 10:51:05
hackerone
hackerone
nessus
nessus
AlmaLinux 8 : httpd:2.4 (ALSA-2023:5050)
2023-09-12 00:00:00
Rocky Linux 8 : httpd:2.4 (RLSA-2023:5050)
2023-09-19 00:00:00
RHEL 9 : httpd (RHSA-2024:4504)
2024-07-11 00:00:00
redhat
redhat
(RHSA-2023:6403) Moderate: httpd and mod_http2 security, bug fix, and enhancement update
2023-11-07 06:04:24
(RHSA-2023:5050) Moderate: httpd:2.4 security update
2023-09-11 12:37:07
(RHSA-2023:5049) Moderate: httpd:2.4 security update
2023-09-11 12:37:03
openvas
openvas
Apache HTTP Server 2.4.30 - 2.4.55 HTTP Request Smuggling Vulnerability - Windows
2023-03-08 00:00:00
Fedora: Security Advisory for httpd (FEDORA-2023-7d14cdec4a)
2023-03-18 00:00:00
veracode
veracode
HTTP Request Smuggling
2023-03-09 10:25:21
oraclelinux
oraclelinux
httpd:2.4 security update
2023-09-12 00:00:00
httpd and mod_http2 security, bug fix, and enhancement update
2023-11-11 00:00:00
rocky
rocky
httpd:2.4 security update
2023-09-19 12:09:00
debiancve
debiancve
CVE-2023-27522
2023-03-07 16:15:09
alpinelinux
alpinelinux
CVE-2023-27522
2023-03-07 16:15:09
github
github
Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling
2023-03-07 18:30:39
almalinux
almalinux
Moderate: httpd:2.4 security update
2023-09-11 00:00:00
Moderate: httpd and mod_http2 security, bug fix, and enhancement update
2023-11-07 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-27522 affecting package httpd 2.4.55-1
2023-04-07 04:59:28
CVE-2023-27522 affecting package httpd for versions less than 2.4.56-1
2023-03-24 23:56:03
f5
f5
K000132965 : Apache vulnerability CVE-2023-27522
2023-03-14 00:00:00
nvd
nvd
CVE-2023-27522
2023-03-07 16:15:09
redhatcve
redhatcve
CVE-2023-27522
2023-03-07 16:30:17
cvelist
cvelist
CVE-2023-27522 Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting
2023-03-07 15:09:30
cve
cve
CVE-2023-27522
2023-03-07 16:15:09
ubuntucve
ubuntucve
CVE-2023-27522
2023-03-07 00:00:00
prion
prion
Design/Logic Flaw
2023-03-07 16:15:00
kaspersky
kaspersky
KLA48513 Multiple vulnerabilities in Apache HTTP Server
2023-03-07 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2023-03-19 01:16:28
slackware
slackware
[slackware-security] httpd
2023-03-08 20:30:50
amazon
amazon
Important: httpd
2023-03-17 16:34:00
Important: httpd24
2023-03-17 15:53:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2023-03-08 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: httpd-2.4.56-1.fc36
2023-03-25 02:04:42
[SECURITY] Fedora 37 Update: httpd-2.4.56-1.fc37
2023-03-11 04:29:50
[SECURITY] Fedora 38 Update: httpd-2.4.56-1.fc38
2023-03-18 00:24:30
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2023-03-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.56-alt1
2023-03-17 00:00:00
redos
redos
ROS-20230420-01
2023-04-20 00:00:00
debian
debian
[SECURITY] [DLA 3401-1] apache2 security update
2023-04-24 21:25:54
[SECURITY] [DSA 5376-1] apache2 security update
2023-03-20 18:52:17
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0083
2023-08-30 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0461
2023-08-30 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0562
2023-04-05 00:00:00
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2023-09-08 00:00:00
ibm
ibm
hp
hp
HP Device Manager Security Updates
2023-04-13 00:00:00
ics
ics
Siemens SINEC NMS
2024-02-15 12:00:00
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
7.2
Confidence
Low
EPSS
0.014
Percentile
86.4%
Related for RHSA-2024:4504