Lucene search
+L

30 matches found

OSV
OSV
added 2024/04/06 6:17 p.m.166 views

BIT-APACHE-2024-24795 Apache HTTP Server: HTTP Response Splitting in multiple modules

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.2AI score0.02874EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2024/04/05 2:21 a.m.8 views

SUSE CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.1CVSS8.2AI score0.02874EPSS
SaveExploits0References12
NVD
NVD
added 2024/04/04 8:15 p.m.43 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS5.6AI score0.02874EPSS
SaveExploits0References10
OSV
OSV
added 2024/04/04 8:15 p.m.12 views

AZL-40040 CVE-2024-24795 affecting package httpd for versions less than 2.4.59-1

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.6AI score0.02874EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/04/04 8:15 p.m.83 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.6AI score0.02874EPSS
SaveExploits0References8
OSV
OSV
added 2024/04/04 8:15 p.m.12 views

UBUNTU-CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6.5AI score0.02874EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2024/04/04 7:20 p.m.42 views

CVE-2024-24795 Apache HTTP Server: HTTP Response Splitting in multiple modules

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.5AI score0.02874EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/04 7:20 p.m.3937 views

CVE-2024-24795

CVE-2024-24795 (httpd) describes HTTP response splitting in multiple Apache HTTP Server modules when malicious response headers can be injected into backend applications, enabling HTTP desynchronization. The vulnerability is mitigated by upgrading to Apache HTTP Server 2.4.59, as indicated across...

6.3CVSS7AI score0.02874EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2024/04/04 7:20 p.m.74 views

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue...

6.3CVSS6AI score0.02874EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2024/04/04 12:00 a.m.56 views

KLA65470 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. HTTP Response splitting vulnerability can be exploited to execute arbitrary code. 2...

7.5CVSS8.4AI score0.91327EPSS
SaveExploits2References3
Rows per page
Query Builder