NetSight
IP …
medium6.3

CVE-2024-24795

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to ca…

Impact

HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack. Users are recommended to upgrade to version 2.4.59, which fixes this issue.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.4.0 before 2.4.59
DebianDebian Linux
Version 10.0
FedoraprojectFedora
Versions 38, 39, 40
NetappOntap
Version 9
NetappOntap Tools
Version 10
BroadcomFabric Operating System
All versions
AppleMacos
before 14.6

Weakness classification

CWE-113CWE-444

References