Wind River Support Network

HomeDefectsLIN1022-7479
Fixed

LIN1022-7479 : Security Advisory - apache2 - CVE-2024-24795

Created: Apr 5, 2024    Updated: Jun 3, 2024
Resolved Date: May 22, 2024
Found In Version: 10.22.33.1
Fix Version: 10.22.33.17
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.

CREATE(Triage):(User=admin) CVE-2024-24795 (https://nvd.nist.gov/vuln/detail/CVE-2024-24795)

CVEs


Live chat
Online