FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-38476): Apache httpd -- Multiple vulnerabilities

FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-38476): Apache httpd -- Multiple vulnerabilities

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

07/01/2024

Created

07/03/2024

Added

07/02/2024

Modified

01/28/2025

Description

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Solution(s)

• freebsd-upgrade-package-apache24

References

• CVE-2024-38476