RHSA-2024:6928HighCVSS 7.5
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP6 security update
🔗 CVE IDs covered (4)
📋 Description
CVE-2023-38709 — httpd: HTTP response splitting CVE-2024-38472 — httpd: SSRF in Apache HTTP Server on Windows CVE-2024-40898 — httpd: SSRF in Apache HTTP Server on Windows via mod_rewrite in server/vhost context CVE-2024-46544 — mod_jk: information Disclosure / DoS
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2024:6928
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.57/html/red_hat_jboss_core_services_apache_http_server_2.4.57_service_pack_6_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2273491
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2295011
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2298648
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2314194
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6928.json