Non notée
CVE-2023-38709 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP…
Description
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache HTTP Server 2.4 | premières → 2.4.58 | Pas de correctif indiqué |
| http_server 2.4 | premières → 2.4.58 | Pas de correctif indiqué |
Références
- httpd.apache.org httpd.apache.org
- security.netapp.com security.netapp.com
- lists.fedoraproject.org lists.fedoraproject.org
- www.openwall.com www.openwall.com
- lists.fedoraproject.org lists.fedoraproject.org
- lists.fedoraproject.org lists.fedoraproject.org
- lists.debian.org lists.debian.org
- support.apple.com support.apple.com
- seclists.org seclists.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache HTTP Server
Les 139 CVE de Apache HTTP Server →
CVE-2026-63686
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all…
Non notée
CVE-2026-93546
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write…
Non notée
CVE-2026-79768
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when…
Non notée
CVE-2026-73637
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows…
Non notée