Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6506-1
HistoryNov 22, 2023 - 12:00 a.m.

Apache HTTP Server vulnerabilities

2023-11-2200:00:00
ubuntu.com
29
apache http server
ubuntu 23.10
ubuntu 23.04
ubuntu 22.04 lts
ubuntu 20.04 lts
mod_macro module
denial of service
memory operations
http/2 connections
cve-2023-31122
cve-2023-43622
cve-2023-45802

7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.1%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • apache2 - Apache HTTP server

Details

David Shoon discovered that the Apache HTTP Server mod_macro module
incorrectly handled certain memory operations. A remote attacker could
possibly use this issue to cause the server to crash, resulting in a denial
of service. (CVE-2023-31122)

Prof. Sven Dietrich, Isa Jafarov, Prof. Heejo Lee, and Choongin Lee
discovered that the Apache HTTP Server incorrectly handled certain HTTP/2
connections. A remote attacker could possibly use this issue to cause the
server to consume resources, leading to a denial of service. This issue
only affected Ubuntu 23.04, and Ubuntu 23.10. (CVE-2023-43622)

Will Dormann and David Warren discovered that the Apache HTTP Server
incorrectly handled memory when handling HTTP/2 connections. A remote
attacker could possibly use this issue to cause the server to consume
resources, leading to a denial of service. (CVE-2023-45802)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchapache2< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-bin< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-bin-dbgsym< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-data< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-dev< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-doc< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-ssl-dev< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-suexec-custom< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-suexec-custom-dbgsym< 2.4.57-2ubuntu2.1UNKNOWN
Ubuntu23.10noarchapache2-suexec-pristine< 2.4.57-2ubuntu2.1UNKNOWN
Rows per page:
1-10 of 601

Related

amazon 2
openvas 38
freebsd 2
nessus 54
osv 17
slackware 1
photon 3
mageia 1
ibm 6
oraclelinux 3
redhat 9
almalinux 3
debian 2
veracode 3
redos 3
redhatcve 3
prion 3
cvelist 3
f5 3
cve 3
ubuntucve 3
alpinelinux 3
debiancve 3
cbl_mariner 2
cnvd 1
fedora 6
ubuntu 1
rosalinux 1
rocky 1
attackerkb 1
hp 1
oracle 2
amazon
amazon
Important: httpd
2023-10-30 23:59:00
Important: httpd24
2023-10-30 23:31:00
openvas
openvas
Slackware: Security Advisory (SSA:2023-292-01)
2023-10-20 00:00:00
Ubuntu: Security Advisory (USN-6506-1)
2023-11-23 00:00:00
Mageia: Security Advisory (MGASA-2023-0304)
2023-10-30 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2023-10-19 00:00:00
www/varnish7 -- Denial of Service
2019-04-19 00:00:00
nessus
nessus
Apache 2.4.x < 2.4.58 Multiple Vulnerabilities
2023-10-20 00:00:00
Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current httpd Multiple Vulnerabilities (SSA:2023-292-01)
2023-10-19 00:00:00
FreeBSD : Apache httpd -- Multiple vulnerabilities (f923205f-6e66-11ee-85eb-84a93843eb75)
2023-10-19 00:00:00
osv
osv
apache2 vulnerabilities
2023-11-22 14:55:30
Moderate: mod_http2 security update
2024-04-30 00:00:00
apache2 - security update
2024-04-16 00:00:00
slackware
slackware
[slackware-security] httpd
2023-10-19 19:21:22
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0502
2023-11-01 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0680
2023-11-03 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0131
2023-10-31 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2023-10-28 00:49:40
ibm
ibm
Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to an attacker uploading arbitrary files and obtaining sensitive information (CVE-2023-45802, CVE-2023-31122)
2024-02-16 22:00:10
Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server (CVE-2023-31122)
2023-11-06 14:17:45
Security Bulletin: IBM HTTP Server is vulnerable to information disclosure due to the included Apache HTTP Server (CVE-2023-31122)
2023-10-25 20:19:49
oraclelinux
oraclelinux
mod_http2 security update
2024-05-02 00:00:00
httpd:2.4 security update
2024-05-24 00:00:00
httpd security update
2024-05-03 00:00:00
redhat
redhat
(RHSA-2024:2368) Moderate: mod_http2 security update
2024-04-30 06:15:30
(RHSA-2024:3121) Moderate: httpd:2.4 security update
2024-05-22 06:35:40
(RHSA-2024:2278) Moderate: httpd security update
2024-04-30 06:15:15
almalinux
almalinux
Moderate: mod_http2 security update
2024-04-30 00:00:00
Moderate: httpd:2.4 security update
2024-05-22 00:00:00
Moderate: httpd security update
2024-04-30 00:00:00
debian
debian
[SECURITY] [DSA 5662-1] apache2 security update
2024-04-16 18:32:07
[SECURITY] [DLA 3818-1] apache2 security update
2024-05-25 11:06:45
veracode
veracode
Denial Of Service (DoS)
2023-10-21 07:38:44
Out-of-bounds Read
2023-10-20 06:57:49
Denial Of Service (DoS)
2023-10-20 07:48:32
redos
redos
ROS-20231030-05
2023-10-30 00:00:00
ROS-20231030-01
2023-10-30 00:00:00
ROS-20240423-01
2024-04-23 00:00:00
redhatcve
redhatcve
CVE-2023-43622
2023-10-20 10:56:55
CVE-2023-31122
2023-10-21 01:51:13
CVE-2023-45802
2023-10-19 19:44:57
prion
prion
Code injection
2023-10-23 07:15:00
Cross site scripting
2023-10-23 07:15:00
Design/Logic Flaw
2023-10-23 07:15:00
cvelist
cvelist
CVE-2023-43622 Apache HTTP Server: DoS in HTTP/2 with initial windows size 0
2023-10-23 06:50:51
CVE-2023-31122 Apache HTTP Server: mod_macro buffer over-read
2023-10-23 06:51:59
CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST
2023-10-23 06:50:23
f5
f5
K000137325 : Apache httpd vulnerability CVE-2023-43622
2023-10-23 00:00:00
K000137326 : Apache mod_macro vulnerability CVE-2023-31122
2023-10-23 00:00:00
K000137327 : Apache mod_http2 vulnerability CVE-2023-45802
2023-10-23 00:00:00
cve
cve
CVE-2023-43622
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
CVE-2023-45802
2023-10-23 07:15:11
ubuntucve
ubuntucve
CVE-2023-43622
2023-10-23 00:00:00
CVE-2023-31122
2023-10-23 00:00:00
CVE-2023-45802
2023-10-23 00:00:00
alpinelinux
alpinelinux
CVE-2023-43622
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
CVE-2023-45802
2023-10-23 07:15:11
debiancve
debiancve
CVE-2023-43622
2023-10-23 07:15:11
CVE-2023-31122
2023-10-23 07:15:11
CVE-2023-45802
2023-10-23 07:15:11
cbl_mariner
cbl_mariner
CVE-2023-43622 affecting package httpd for versions less than 2.4.58-1
2023-11-08 02:07:28
CVE-2023-45802 affecting package httpd for versions less than 2.4.58-1
2023-11-08 02:07:28
cnvd
cnvd
Apache HTTP Server Buffer Overflow Vulnerability (CNVD-2023-93320)
2023-10-28 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: httpd-2.4.58-1.fc38
2023-10-24 01:23:53
[SECURITY] Fedora 39 Update: httpd-2.4.58-1.fc39
2023-11-03 19:03:08
[SECURITY] Fedora 37 Update: httpd-2.4.58-1.fc37
2023-11-07 02:32:36
ubuntu
ubuntu
Apache HTTP Server vulnerability
2023-11-23 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2326
2024-01-23 12:20:08
rocky
rocky
httpd security update
2024-05-10 14:32:42
attackerkb
attackerkb
CVE-2023-44487
2023-10-10 00:00:00
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.1%

JSON
Related for USN-6506-1
amazon2openvas38freebsd2nessus54osv17slackware1photon3mageia1ibm6oraclelinux3redhat9almalinux3debian2veracode3redos3redhatcve3prion3cvelist3f53cve3ubuntucve3alpinelinux3debiancve3cbl_mariner2cnvd1fedora6ubuntu1rosalinux1rocky1attackerkb1hp1oracle2