Apache HTTP Server Multiple Vulnerabilities

Release Date: 3 Jul 2024 4163 Views

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities were identified in Apache HTTP Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.

Impact

Denial of Service
Remote Code Execution
Security Restriction Bypass
Information Disclosure

System / Technologies affected

Apache HTTP Server versions prior to 2.4.60

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Apache HTTP Server version 2.4.60

Vulnerability Identifier

CVE-2024-36387
CVE-2024-38472
CVE-2024-38473
CVE-2024-38474
CVE-2024-38475
CVE-2024-38476
CVE-2024-38477
CVE-2024-39573

Source

Apache