Lucene search
RedHatRHSA-2024:5001HistoryAug 05, 2024 - 8:31 a.m.
(RHSA-2024:5001) Moderate: httpd security update
2024-08-0508:31:48
access.redhat.com
10
rhsa-2024-5001
httpd
security update
mod_proxy
mod_rewrite
cve-2024-38473
cve-2024-39573
cvss score
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
7.2
Confidence
Low
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
-
httpd: Encoding problem in mod_proxy (CVE-2024-38473)
-
httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | aarch64 | mod_lua | < 2.4.53-11.el9_2.10 | mod_lua-2.4.53-11.el9_2.10.aarch64.rpm |
| RedHat | 9 | noarch | httpd-filesystem | < 2.4.53-11.el9_2.10 | httpd-filesystem-2.4.53-11.el9_2.10.noarch.rpm |
| RedHat | 9 | aarch64 | httpd | < 2.4.53-11.el9_2.10 | httpd-2.4.53-11.el9_2.10.aarch64.rpm |
| RedHat | 9 | ppc64le | mod_session | < 2.4.53-11.el9_2.10 | mod_session-2.4.53-11.el9_2.10.ppc64le.rpm |
| RedHat | 9 | aarch64 | httpd-devel | < 2.4.53-11.el9_2.10 | httpd-devel-2.4.53-11.el9_2.10.aarch64.rpm |
| RedHat | 9 | ppc64le | httpd-devel | < 2.4.53-11.el9_2.10 | httpd-devel-2.4.53-11.el9_2.10.ppc64le.rpm |
| RedHat | 9 | x86_64 | mod_proxy_html-debuginfo | < 2.4.53-11.el9_2.10 | mod_proxy_html-debuginfo-2.4.53-11.el9_2.10.x86_64.rpm |
| RedHat | 9 | aarch64 | httpd-debuginfo | < 2.4.53-11.el9_2.10 | httpd-debuginfo-2.4.53-11.el9_2.10.aarch64.rpm |
| RedHat | 9 | x86_64 | httpd-devel | < 2.4.53-11.el9_2.10 | httpd-devel-2.4.53-11.el9_2.10.x86_64.rpm |
| RedHat | 9 | x86_64 | mod_session | < 2.4.53-11.el9_2.10 | mod_session-2.4.53-11.el9_2.10.x86_64.rpm |
Related
redhatcve
redhatcve
CVE-2024-38473
2024-07-01 21:49:32
CVE-2024-39573
2024-07-01 19:52:48
ubuntucve
ubuntucve
CVE-2024-39573
2024-07-01 00:00:00
CVE-2024-38473
2024-07-01 00:00:00
nessus
nessus
RHEL 9 : httpd (RHSA-2024:5001)
2024-08-06 00:00:00
F5 Networks BIG-IP : Apache HTTP server vulnerability (K000140693)
2024-08-15 00:00:00
Rocky Linux 9 : httpd (RLSA-2024:4726)
2024-07-26 00:00:00
osv
osv
BIT-apache-2024-39573
2024-07-03 07:16:17
CVE-2024-39573
2024-07-01 19:15:05
Important: httpd:2.4 security update
2024-07-23 00:00:00
cvelist
cvelist
CVE-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution
2024-07-01 18:16:44
CVE-2024-38473 Apache HTTP Server proxy encoding problem
2024-07-01 18:14:21
nvd
nvd
CVE-2024-39573
2024-07-01 19:15:05
CVE-2024-38473
2024-07-01 19:15:04
vulnrichment
vulnrichment
CVE-2024-39573 Apache HTTP Server: mod_rewrite proxy handler substitution
2024-07-01 18:16:44
CVE-2024-38473 Apache HTTP Server proxy encoding problem
2024-07-01 18:14:21
debiancve
debiancve
CVE-2024-39573
2024-07-01 19:15:05
CVE-2024-38473
2024-07-01 19:15:04
alpinelinux
alpinelinux
CVE-2024-39573
2024-07-01 19:15:05
CVE-2024-38473
2024-07-01 19:15:04
cve
cve
CVE-2024-39573
2024-07-01 19:15:05
CVE-2024-38473
2024-07-01 19:15:04
hackerone
hackerone
f5
f5
K000140693: Apache HTTP server vulnerability CVE-2024-39573
2024-08-13 00:00:00
K000140505: Apache HTTPD vulnerability CVE-2024-38473
2024-08-03 00:00:00
rocky
rocky
httpd security update
2024-07-26 12:33:59
redhat
redhat
(RHSA-2024:4720) Important: httpd:2.4 security update
2024-07-23 08:15:17
(RHSA-2024:4726) Important: httpd security update
2024-07-23 12:57:04
almalinux
almalinux
Important: httpd security update
2024-07-23 00:00:00
Important: httpd:2.4 security update
2024-07-23 00:00:00
oraclelinux
oraclelinux
httpd security update
2024-07-23 00:00:00
httpd:2.4 security update
2024-07-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-38473 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
CVE-2024-38473 affecting package httpd for versions less than 2.4.62-1
2024-07-26 17:52:50
githubexploit
githubexploit
Exploit for CVE-2024-38473
2024-08-23 14:39:31
Exploit for CVE-2024-38473
2024-08-02 19:57:52
veracode
veracode
Authentication Bypass
2024-07-09 06:06:43
fedora
fedora
[SECURITY] Fedora 40 Update: httpd-2.4.61-1.fc40
2024-07-09 01:55:52
[SECURITY] Fedora 39 Update: httpd-2.4.61-1.fc39
2024-07-19 02:21:50
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-39f1a828ed)
2024-09-10 00:00:00
Fedora: Security Advisory (FEDORA-2024-e7e73befad)
2024-08-06 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2024-2393)
2024-09-12 00:00:00
ibm
ibm
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2024-07-01 00:00:00
amazon
amazon
Important: httpd
2024-07-18 02:00:00
kaspersky
kaspersky
KLA70199 Multiple vulnerabilities in Apache HTTP Server
2024-07-01 00:00:00
ubuntu
ubuntu
Apache HTTP Server regression
2024-07-11 00:00:00
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00
slackware
slackware
[slackware-security] httpd
2024-07-02 19:38:48
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
redos
redos
ROS-20240812-15
2024-08-12 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2024-4.0-0651
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0314
2024-07-11 00:00:00
Critical Photon OS Security Update - PHSA-2024-3.0-0771
2024-07-12 00:00:00
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
AI Score
7.2
Confidence
Low
Related for RHSA-2024:5001