Wind River Support Network

HomeDefectsLIN1019-13688
Fixed

LIN1019-13688 : Security Advisory - apache2 - CVE-2024-38476

Created: Jul 1, 2024    Updated: Dec 30, 2024
Resolved Date: Dec 30, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

CREATE(Triage):(User=admin) CVE-2024-38476 (https://nvd.nist.gov/vuln/detail/CVE-2024-38476)

CVEs


Live chat
Online