CVE-2023-38709

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2024/Jul/18 · Mailing List
• openwall.com/lists/oss-security/2024/04/04/3 · Mailing List
• httpd.apache.org/security/vulnerabilities_24.html · Vendor Advisory
• lists.debian.org/debian-lts-announce/2024/05/msg00013.html · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC · Mailing List
• security.netapp.com/advisory/ntap-20240415-0013 · Third Party Advisory
• support.apple.com/kb/HT214119

Lỗ hổng khác của http server

• CVE-2026-93546CAO 8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker …
• CVE-2026-79768TRUNG BÌNH 5.3Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wi…
• CVE-2026-73637CAO 7.3Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated …
• CVE-2026-73636CAO 8.1Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a …
• CVE-2026-63718CAO 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via …