Wind River Support Network

HomeDefectsLIN1024-2996
Acknowledged

LIN1024-2996 : Security Advisory - apache2 - CVE-2024-40898

Created: Jul 17, 2024    Updated: Jan 7, 2026
Resolved Date: Aug 5, 2024
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.

Users are recommended to upgrade to version 2.4.62 which fixes this issue. 

https://nvd.nist.gov/vuln/detail/CVE-2024-40898
  • Linkedin
  • Facebook
  • Twitter
  • Youtube