Описание
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| apache2 | fixed | 2.4.59-1 | package |
Примечания
https://www.openwall.com/lists/oss-security/2024/04/04/3
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709
https://github.com/apache/httpd/commit/ac20389f3c816d990aba21720f1492b69ac5cb44
EPSS
Связанные уязвимости
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
EPSS