Red Hat Security AdvisoryRHSA-2023:3292
httpd24-httpd security update
Released 2023-05-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) httpd24-httpd-2.4.34-23.el7.6, httpd24-httpd-devel-2.4.34-23.el7.6, httpd24-httpd-manual-2.4.34-23.el7.6 +5
- Red Hat Software Collections for RHEL(v. 7) httpd24-httpd-2.4.34-23.el7.6, httpd24-httpd-devel-2.4.34-23.el7.6, httpd24-httpd-manual-2.4.34-23.el7.6 +5
Fixes 1 record
Priority CRITICAL 90
Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.84508 · Published 2023-03-07 · Partial fix CWE-444
