AZL-39997

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-39997.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-39997

Upstream

CVE-2024-24795

Published

2024-04-04T20:15:08Z

Modified

2026-04-21T04:28:53.236903Z

Summary

CVE-2024-24795 affecting package httpd for versions less than 2.4.61-1

Details

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack.

Users are recommended to upgrade to version 2.4.59, which fixes this issue.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-24795

Affected packages

Azure Linux:3 / httpd

Package

Name: httpd
Purl: pkg:rpm/azure-linux/httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.61-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-39997.json"