What is RHSA-2023:1597?

RHSA-2023:1597 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: httpd:2.4 security update

Which CVE IDs does RHSA-2023:1597 cover?

RHSA-2023:1597 covers the following CVE IDs: CVE-2023-25690. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:1597?

RHSA-2023:1597 has a CVSS v3 base score of 9.8, published by Red Hat Product Security.

Which products are affected by RHSA-2023:1597?

RHSA-2023:1597 affects 86 products, including: Red Hat Enterprise Linux AppStream EUS (v.8.6); httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6); httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6); httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6); httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6); and others — see the full list on the advisory page.

RHSA-2023:1597HighCVSS 9.8

Red Hat Security Advisory: httpd:2.4 security update

Vendor

Red Hat Product Security

Published

April 4, 2023

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2023-25690 →

📋 Description

CVE-2023-25690 — httpd: HTTP request splitting with mod_rewrite and mod_proxy

🎯 Affected products86

Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debugsource-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debugsource-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debugsource-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-debugsource-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-devel-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-devel-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-devel-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-devel-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-filesystem-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-manual-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.noarch (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
httpd-tools-debuginfo-0:2.4.37-47.module+el8.6.0+18507+843660a1.4.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
mod_http2-0:1.15.7-5.module+el8.6.0+18506+34b194fb.2.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
mod_http2-0:1.15.7-5.module+el8.6.0+18506+34b194fb.2.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)
+56 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically.

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products86

✅ Remediation

🔗 References (4)