FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-38477): Apache httpd -- Multiple vulnerabilities

FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-38477): Apache httpd -- Multiple vulnerabilities

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

07/01/2024

Created

07/03/2024

Added

07/02/2024

Modified

01/28/2025

Description

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Solution(s)

• freebsd-upgrade-package-apache24

References

• CVE-2024-38477