Apache HTTP Server Multiple Vulnerabilities
Release Date: 3 Jul 2024
RISK: Medium Risk
TYPE: Servers - Web Servers
Multiple vulnerabilities were identified in Apache HTTP Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, security restriction bypass and sensitive information disclosure on the targeted system.
Impact
- Denial of Service
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
- Apache HTTP Server versions prior to 2.4.60
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- Apache HTTP Server version 2.4.60
Vulnerability Identifier
- CVE-2024-36387
- CVE-2024-38472
- CVE-2024-38473
- CVE-2024-38474
- CVE-2024-38475
- CVE-2024-38476
- CVE-2024-38477
- CVE-2024-39573
沒有留言:
發佈留言