[{"vendor":"apache","product":"http_server","defaultStatus":"unknown","cpes":["cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"2.4.58","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-04-05T13:57:02.091077Z","id":"CVE-2023-38709","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Apache Software Foundation","product":"Apache HTTP Server","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.4.58","versionType":"semver","status":"affected"}]}]

http://www.openwall.com/lists/oss-security/2025/07/10/2

http://www.openwall.com/lists/oss-security/2025/07/10/3

OR
          *cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:* versions up to (excluding) 2.4.59

OR
          *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 14.6

OR
          *cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*
          *cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*
          *cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*

OR
          *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

OR
          *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
          *cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
          *cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

Apache Software Foundation: http://seclists.org/fulldisclosure/2024/Jul/18 Types: Mailing List, Third Party Advisory

Apache Software Foundation: http://www.openwall.com/lists/oss-security/2024/04/04/3 Types: Mailing List, Third Party Advisory

Apache Software Foundation: https://httpd.apache.org/security/vulnerabilities_24.html Types: Vendor Advisory

Apache Software Foundation: https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html Types: Mailing List, Third Party Advisory

Apache Software Foundation: https://lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/ Types: Mailing List, Third Party Advisory

Apache Software Foundation: https://lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/ Types: Mailing List, Third Party Advisory

Apache Software Foundation: https://lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/ Types: Mailing List, Third Party Advisory

Apache Software Foundation: https://security.netapp.com/advisory/ntap-20240415-0013/ Types: Third Party Advisory

Apache Software Foundation: https://support.apple.com/kb/HT214119 Types: Third Party Advisory

CVE: http://seclists.org/fulldisclosure/2024/Jul/18 Types: Mailing List, Third Party Advisory

CVE: http://www.openwall.com/lists/oss-security/2024/04/04/3 Types: Mailing List, Third Party Advisory

CVE: https://httpd.apache.org/security/vulnerabilities_24.html Types: Vendor Advisory

CVE: https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html Types: Mailing List, Third Party Advisory

CVE: https://lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/ Types: Mailing List, Third Party Advisory

CVE: https://lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/ Types: Mailing List, Third Party Advisory

CVE: https://lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/ Types: Mailing List, Third Party Advisory

CVE: https://security.netapp.com/advisory/ntap-20240415-0013/ Types: Third Party Advisory

CVE: https://support.apple.com/kb/HT214119 Types: Third Party Advisory

http://seclists.org/fulldisclosure/2024/Jul/18

http://www.openwall.com/lists/oss-security/2024/04/04/3

https://httpd.apache.org/security/vulnerabilities_24.html

https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html

https://lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/

https://lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/

https://lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/

https://security.netapp.com/advisory/ntap-20240415-0013/

https://support.apple.com/kb/HT214119

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA-ADP CWE-1284

Apache Software Foundation http://seclists.org/fulldisclosure/2024/Jul/18 [No types assigned]

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.

Apache Software Foundation https://support.apple.com/kb/HT214119 [No types assigned]

Apache Software Foundation https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/ [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/ [No types assigned]

Apache Software Foundation http://www.openwall.com/lists/oss-security/2024/04/04/3 [No types assigned]

Apache Software Foundation https://lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/ [No types assigned]

Apache Software Foundation https://security.netapp.com/advisory/ntap-20240415-0013/ [No types assigned]

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.

Apache Software Foundation https://httpd.apache.org/security/vulnerabilities_24.html [No types assigned]