https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:16:46.092236+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-38709 CVE-2023-38709 — Apache HTTP Server: HTTP response splitting 2026-09-29T06:16:46.235356+00:00

Affected: Apache Software Foundation Apache HTTP Server, apache http_server

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.

This issue affects Apache HTTP Server: through 2.4.58.

 https://vulnerability.circl.lu/vuln/usn-6729-1 USN-6729-1 — apache2 vulnerabilities 2026-09-29T06:16:46.235510+00:00

Affected: Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2

Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2023-38709)

Keran Mu and Jianjun Chen discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2024-24795)

Bartek Nowotarski discovered that the Apache HTTP Server HTTP/2 module incorrectly handled endless continuation frames. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2024-27316)