HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55.
Special characters in the origin response header can truncate/split the response forwarded to the client.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade httpd-coreUpgrade httpd-develUpgrade mod_proxy_htmlUpgrade mod_sslUpgrade mod_mdUpgrade httpd-manualUpgrade httpdUpgrade httpd-filesystemUpgrade httpd-toolsUpgrade mod_sessionUpgrade mod_ldapUpgrade mod_http2Upgrade mod_lua | Sep 13, 2023 | Mar 7, 2023 |
| Alpine Linux | — | Upgrade apache2 | Mar 26, 2024 | Mar 7, 2023 |
| Amazon Linux Ami 2 | — | Upgrade httpdUpgrade httpd-toolsUpgrade mod_sessionUpgrade mod_mdUpgrade mod_sslUpgrade mod_ldapUpgrade httpd-manualUpgrade httpd-develUpgrade httpd-debuginfoUpgrade mod_proxy_htmlUpgrade httpd-filesystem | Mar 22, 2023 | Mar 7, 2023 |
| Amazon_linux | — | Upgrade httpd24 | Mar 23, 2023 | Mar 7, 2023 |
| Amazon_linux_2023 | — | Upgrade httpd-debuginfoUpgrade httpd-develUpgrade httpd-toolsUpgrade httpdUpgrade mod_ldap-debuginfoUpgrade mod_proxy_htmlUpgrade mod_ssl-debuginfoUpgrade httpd-coreUpgrade mod_sslUpgrade mod_ldapUpgrade httpd-filesystemUpgrade httpd-core-debuginfoUpgrade mod_luaUpgrade httpd-debugsourceUpgrade mod_lua-debuginfoUpgrade httpd-tools-debuginfoUpgrade mod_session-debuginfoUpgrade httpd-manualUpgrade mod_sessionUpgrade mod_proxy_html-debuginfo | Feb 17, 2025 | Mar 7, 2023 |
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Nov 29, 2023 | Mar 7, 2023 |
| Centos_linux | — | Upgrade mod_sessionUpgrade httpd-tools-debuginfoUpgrade mod_md-debuginfoUpgrade httpdUpgrade mod_ldapUpgrade mod_proxy_html-debuginfoUpgrade httpd-manualUpgrade mod_lua-debuginfoUpgrade httpd-debuginfoUpgrade httpd-debugsourceUpgrade httpd-coreUpgrade httpd-toolsUpgrade mod_luaUpgrade mod_http2-debugsourceUpgrade httpd-filesystemUpgrade mod_session-debuginfoUpgrade httpd-core-debuginfoUpgrade mod_md-debugsourceUpgrade mod_ldap-debuginfoUpgrade mod_http2Upgrade mod_mdUpgrade mod_http2-debuginfoUpgrade httpd-develUpgrade mod_ssl-debuginfoUpgrade mod_proxy_htmlUpgrade mod_ssl | Sep 12, 2023 | Mar 7, 2023 |
| Debian | — | Upgrade apache2 | Mar 22, 2023 | Mar 7, 2023 |
| Freebsd | — | Upgrade apache24 | Mar 23, 2023 | Mar 11, 2023 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Sep 11, 2023 | Mar 7, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade httpd-toolsUpgrade httpdUpgrade httpd-filesystemUpgrade mod_ssl | May 9, 2023 | Mar 7, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade httpd-toolsUpgrade mod_sslUpgrade httpdUpgrade httpd-filesystem | Jul 5, 2023 | Mar 7, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade httpd-toolsUpgrade httpd-develUpgrade httpd-filesystemUpgrade httpdUpgrade httpd-manualUpgrade mod_sslUpgrade mod_session | Jun 9, 2023 | Mar 7, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade httpd-toolsUpgrade httpd-filesystemUpgrade mod_sslUpgrade httpd | May 10, 2023 | Mar 7, 2023 |
| Oracle_linux | — | Upgrade mod_http2Upgrade httpd-coreUpgrade httpd-toolsUpgrade mod_mdUpgrade mod_sessionUpgrade mod_proxy_htmlUpgrade mod_ldapUpgrade httpd-manualUpgrade httpd-filesystemUpgrade httpd-develUpgrade mod_luaUpgrade httpdUpgrade mod_ssl | Sep 13, 2023 | Mar 7, 2023 |
| Redhat_linux | — | Upgrade mod_mdUpgrade mod_lua-debuginfoUpgrade httpd-manualNo solution existsUpgrade mod_md-debuginfoUpgrade httpd-toolsUpgrade mod_http2-debugsourceUpgrade httpd-debugsourceUpgrade mod_ldap-debuginfoUpgrade httpd-core-debuginfoUpgrade httpd-coreUpgrade mod_proxy_html-debuginfoUpgrade mod_http2-debuginfoUpgrade mod_sessionUpgrade mod_luaUpgrade httpd-debuginfoUpgrade httpd-tools-debuginfoUpgrade mod_ldapUpgrade mod_session-debuginfoUpgrade httpd-filesystemUpgrade mod_md-debugsourceUpgrade mod_ssl-debuginfoUpgrade httpdUpgrade httpd-develUpgrade mod_proxy_htmlUpgrade mod_sslUpgrade mod_http2 | Sep 12, 2023 | Mar 7, 2023 |
| Rocky_linux | — | Upgrade httpd-debuginfoUpgrade httpdUpgrade mod_sslUpgrade mod_md-debuginfoUpgrade httpd-tools-debuginfoUpgrade httpd-develUpgrade httpd-debugsourceUpgrade mod_http2-debugsourceUpgrade mod_http2-debuginfoUpgrade httpd-toolsUpgrade mod_proxy_html-debuginfoUpgrade mod_ldap-debuginfoUpgrade mod_http2Upgrade mod_sessionUpgrade mod_session-debuginfoUpgrade mod_mdUpgrade mod_ldapUpgrade mod_proxy_htmlUpgrade mod_md-debugsourceUpgrade mod_ssl-debuginfo | Mar 5, 2024 | Mar 7, 2023 |
| Suse | — | Upgrade apache2-eventUpgrade apache2-example-pagesUpgrade apache2-utilsUpgrade apache2-workerUpgrade apache2-docUpgrade apache2-preforkUpgrade apache2-develUpgrade apache2 | Mar 20, 2023 | Mar 7, 2023 |
| Ubuntu | — | Upgrade apache2 | Mar 22, 2023 | Mar 7, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 7, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub