Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2560-1

Опубликовано: 18 июл. 2024
Источник: suse-cvrf

Описание

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect (bsc#1227269)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
apache2-2.4.51-35.54.1
apache2-doc-2.4.51-35.54.1
apache2-example-pages-2.4.51-35.54.1
apache2-prefork-2.4.51-35.54.1
apache2-tls13-2.4.51-35.54.1
apache2-tls13-doc-2.4.51-35.54.1
apache2-tls13-example-pages-2.4.51-35.54.1
apache2-tls13-prefork-2.4.51-35.54.1
apache2-tls13-utils-2.4.51-35.54.1
apache2-tls13-worker-2.4.51-35.54.1
apache2-utils-2.4.51-35.54.1
apache2-worker-2.4.51-35.54.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
apache2-2.4.51-35.54.1
apache2-doc-2.4.51-35.54.1
apache2-example-pages-2.4.51-35.54.1
apache2-prefork-2.4.51-35.54.1
apache2-tls13-2.4.51-35.54.1
apache2-tls13-doc-2.4.51-35.54.1
apache2-tls13-example-pages-2.4.51-35.54.1
apache2-tls13-prefork-2.4.51-35.54.1
apache2-tls13-utils-2.4.51-35.54.1
apache2-tls13-worker-2.4.51-35.54.1
apache2-utils-2.4.51-35.54.1
apache2-worker-2.4.51-35.54.1
SUSE Linux Enterprise Software Development Kit 12 SP5
apache2-devel-2.4.51-35.54.1
apache2-tls13-devel-2.4.51-35.54.1

Ссылки

Описание

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:apache2-2.4.51-35.54.1
SUSE Linux Enterprise Server 12 SP5:apache2-doc-2.4.51-35.54.1
SUSE Linux Enterprise Server 12 SP5:apache2-example-pages-2.4.51-35.54.1
SUSE Linux Enterprise Server 12 SP5:apache2-prefork-2.4.51-35.54.1
Ссылки
Уязвимость SUSE-SU-2024:2560-1