Red Hat Security Advisory

RHSA-2024:3121

httpd:2.4 security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4, httpd-2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4, httpd-2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 +38

TI-2023-14832 CVE-2023-31122 · GHSA-xw7g-pw64-xph3

MEDIUM 44

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0304 Published 2023-10-23 Partial fix CWE-125

TI-2023-24564 CVE-2023-45802 · GHSA-m4mp-v249-x3mh

LOW 32

When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.03168 Published 2023-10-23 Partial fix CWE-404