rpm package
suse/apache2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4
pkg:rpm/suse/apache2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4
Vulnerabilities (23)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-24795 | — | < 2.4.51-150400.6.17.1 | 2.4.51-150400.6.17.1 | Apr 4, 2024 | HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue. | ||
| CVE-2023-38709 | — | < 2.4.51-150400.6.17.1 | 2.4.51-150400.6.17.1 | Apr 4, 2024 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58. | ||
| CVE-2023-45802 | — | < 2.4.51-150400.6.40.1 | 2.4.51-150400.6.40.1 | Oct 23, 2023 | When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy an |
- CVE-2024-24795Apr 4, 2024affected < 2.4.51-150400.6.17.1fixed 2.4.51-150400.6.17.1
HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.
- CVE-2023-38709Apr 4, 2024affected < 2.4.51-150400.6.17.1fixed 2.4.51-150400.6.17.1
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
- CVE-2023-45802Oct 23, 2023affected < 2.4.51-150400.6.40.1fixed 2.4.51-150400.6.40.1
When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy an
Page 2 of 2