What is RHSA-2023:1596?

RHSA-2023:1596 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: httpd:2.4 security update

Which CVE IDs does RHSA-2023:1596 cover?

RHSA-2023:1596 covers the following CVE IDs: CVE-2023-25690. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:1596?

RHSA-2023:1596 has a CVSS v3 base score of 9.8, published by Red Hat Product Security.

Which products are affected by RHSA-2023:1596?

RHSA-2023:1596 affects 86 products, including: Red Hat Enterprise Linux AppStream EUS (v.8.4); httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4); and others — see the full list on the advisory page.

RHSA-2023:1596HighCVSS 9.8

Red Hat Security Advisory: httpd:2.4 security update

Vendor

Red Hat Product Security

Published

April 4, 2023

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-25690 →

📋 Description

CVE-2023-25690 — httpd: HTTP request splitting with mod_rewrite and mod_proxy

🎯 Affected products86

Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debugsource-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debugsource-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debugsource-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-debugsource-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-devel-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-devel-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-devel-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-devel-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-filesystem-0:2.4.37-39.module+el8.4.0+18509+78723510.6.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-manual-0:2.4.37-39.module+el8.4.0+18509+78723510.6.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
httpd-tools-debuginfo-0:2.4.37-39.module+el8.4.0+18509+78723510.6.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
mod_http2-0:1.15.7-3.module+el8.4.0+18512+9c29e63a.2.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
mod_http2-0:1.15.7-3.module+el8.4.0+18512+9c29e63a.2.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)
+56 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products86

✅ Remediation

🔗 References (4)