https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:16:46 +0000 https://vulnerability.circl.lu/vuln/cve-2023-38709 <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, apache http_server</p> <p>Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.</p> <p>This issue affects Apache HTTP Server: through 2.4.58.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache HTTP Server, apache http_server</p> <p>Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.</p> <p>This issue affects Apache HTTP Server: through 2.4.58.</p> https://vulnerability.circl.lu/vuln/cve-2023-38709 https://vulnerability.circl.lu/vuln/usn-6729-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2</p> <p>Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2023-38709)</p> <p>Keran Mu and Jianjun Chen discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2024-24795)</p> <p>Bartek Nowotarski discovered that the Apache HTTP Server HTTP/2 module incorrectly handled endless continuation frames. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2024-27316)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: apache2, Ubuntu:22.04:LTS: apache2</p> <p>Orange Tsai discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2023-38709)</p> <p>Keran Mu and Jianjun Chen discovered that the Apache HTTP Server incorrectly handled validating certain input. A remote attacker could possibly use this issue to perform HTTP request splitting attacks. (CVE-2024-24795)</p> <p>Bartek Nowotarski discovered that the Apache HTTP Server HTTP/2 module incorrectly handled endless continuation frames. A remote attacker could possibly use this issue to cause the server to consume resources, leading to a denial of service. (CVE-2024-27316)</p> https://vulnerability.circl.lu/vuln/usn-6729-1