Wind River Support Network

HomeDefectsLIN1021-8126
Fixed

LIN1021-8126 : Security Advisory - apache2 - CVE-2024-24795

Created: Apr 5, 2024    Updated: May 19, 2024
Resolved Date: May 19, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.

CREATE(Triage):(User=admin) CVE-2024-24795 (https://nvd.nist.gov/vuln/detail/CVE-2024-24795)

CVEs


Live chat
Online