Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-httpdalma-upgrade-httpd-corealma-upgrade-httpd-develalma-upgrade-httpd-filesystemalma-upgrade-httpd-manualalma-upgrade-httpd-toolsalma-upgrade-mod_http2alma-upgrade-mod_ldapalma-upgrade-mod_luaalma-upgrade-mod_mdalma-upgrade-mod_proxy_htmlalma-upgrade-mod_sessionalma-upgrade-mod_ssl | Feb 22, 2023 | Jan 17, 2023 | |
| Alpine Linux | alpine-linux-upgrade-apache2 | Aug 22, 2024 | Jan 17, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-httpdamazon-linux-ami-2-upgrade-httpd-debuginfoamazon-linux-ami-2-upgrade-httpd-develamazon-linux-ami-2-upgrade-httpd-filesystemamazon-linux-ami-2-upgrade-httpd-manualamazon-linux-ami-2-upgrade-httpd-toolsamazon-linux-ami-2-upgrade-mod_ldapamazon-linux-ami-2-upgrade-mod_mdamazon-linux-ami-2-upgrade-mod_proxy_htmlamazon-linux-ami-2-upgrade-mod_sessionamazon-linux-ami-2-upgrade-mod_ssl | Feb 23, 2023 | Jan 17, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-httpd24 | Mar 23, 2023 | Jan 17, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-httpdamazon-linux-2023-upgrade-httpd-coreamazon-linux-2023-upgrade-httpd-core-debuginfoamazon-linux-2023-upgrade-httpd-debuginfoamazon-linux-2023-upgrade-httpd-debugsourceamazon-linux-2023-upgrade-httpd-develamazon-linux-2023-upgrade-httpd-filesystemamazon-linux-2023-upgrade-httpd-manualamazon-linux-2023-upgrade-httpd-toolsamazon-linux-2023-upgrade-httpd-tools-debuginfoamazon-linux-2023-upgrade-mod-ldapamazon-linux-2023-upgrade-mod-ldap-debuginfoamazon-linux-2023-upgrade-mod-luaamazon-linux-2023-upgrade-mod-lua-debuginfoamazon-linux-2023-upgrade-mod-proxy-htmlamazon-linux-2023-upgrade-mod-proxy-html-debuginfoamazon-linux-2023-upgrade-mod-sessionamazon-linux-2023-upgrade-mod-session-debuginfoamazon-linux-2023-upgrade-mod-sslamazon-linux-2023-upgrade-mod-ssl-debuginfo | Feb 17, 2025 | Jan 17, 2023 | |
| Apache Httpd | apache-httpd-upgrade-latest | Nov 29, 2023 | Jan 17, 2023 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 17, 2023 | |
| Centos_linux | — | centos-upgrade-httpdcentos-upgrade-httpd-corecentos-upgrade-httpd-core-debuginfocentos-upgrade-httpd-debuginfocentos-upgrade-httpd-debugsourcecentos-upgrade-httpd-develcentos-upgrade-httpd-filesystemcentos-upgrade-httpd-manualcentos-upgrade-httpd-toolscentos-upgrade-httpd-tools-debuginfocentos-upgrade-mod_http2centos-upgrade-mod_http2-debuginfocentos-upgrade-mod_http2-debugsourcecentos-upgrade-mod_ldapcentos-upgrade-mod_ldap-debuginfocentos-upgrade-mod_luacentos-upgrade-mod_lua-debuginfocentos-upgrade-mod_mdcentos-upgrade-mod_md-debuginfocentos-upgrade-mod_md-debugsourcecentos-upgrade-mod_proxy_htmlcentos-upgrade-mod_proxy_html-debuginfocentos-upgrade-mod_sessioncentos-upgrade-mod_session-debuginfocentos-upgrade-mod_sslcentos-upgrade-mod_ssl-debuginfo | Feb 22, 2023 | Jan 17, 2023 |
| Debian | debian-upgrade-apache2 | Mar 6, 2023 | Jan 17, 2023 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Feb 22, 2023 | |
| Freebsd | freebsd-upgrade-package-apache24 | Jan 19, 2023 | Jan 17, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-www-servers-apache | Sep 11, 2023 | Jan 17, 2023 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-httpdhuawei-euleros-2_0_sp10-upgrade-httpd-filesystemhuawei-euleros-2_0_sp10-upgrade-httpd-toolshuawei-euleros-2_0_sp10-upgrade-mod_ssl | Mar 20, 2023 | Jan 17, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-httpdhuawei-euleros-2_0_sp11-upgrade-httpd-filesystemhuawei-euleros-2_0_sp11-upgrade-httpd-toolshuawei-euleros-2_0_sp11-upgrade-mod_ssl | May 8, 2023 | Jan 17, 2023 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-httpdhuawei-euleros-2_0_sp5-upgrade-httpd-develhuawei-euleros-2_0_sp5-upgrade-httpd-manualhuawei-euleros-2_0_sp5-upgrade-httpd-toolshuawei-euleros-2_0_sp5-upgrade-mod_sessionhuawei-euleros-2_0_sp5-upgrade-mod_ssl | Jun 9, 2023 | Jan 17, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-httpdhuawei-euleros-2_0_sp8-upgrade-httpd-develhuawei-euleros-2_0_sp8-upgrade-httpd-filesystemhuawei-euleros-2_0_sp8-upgrade-httpd-manualhuawei-euleros-2_0_sp8-upgrade-httpd-toolshuawei-euleros-2_0_sp8-upgrade-mod_sessionhuawei-euleros-2_0_sp8-upgrade-mod_ssl | Apr 13, 2023 | Jan 17, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-httpdhuawei-euleros-2_0_sp9-upgrade-httpd-filesystemhuawei-euleros-2_0_sp9-upgrade-httpd-toolshuawei-euleros-2_0_sp9-upgrade-mod_ssl | May 10, 2023 | Jan 17, 2023 | |
| Ibm Http_server | ibm-http_server-apply-interim-fix-ph51982-for-8_5ibm-http_server-apply-interim-fix-ph51982-for-9_0ibm-http_server-apply-fix-pack-8_5_5_24ibm-http_server-apply-fix-pack-9_0_5_15 | Nov 20, 2025 | Feb 27, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-httpdoracle-linux-upgrade-httpd-coreoracle-linux-upgrade-httpd-develoracle-linux-upgrade-httpd-filesystemoracle-linux-upgrade-httpd-manualoracle-linux-upgrade-httpd-toolsoracle-linux-upgrade-mod-http2oracle-linux-upgrade-mod-ldaporacle-linux-upgrade-mod-luaoracle-linux-upgrade-mod-mdoracle-linux-upgrade-mod-proxy-htmloracle-linux-upgrade-mod-sessionoracle-linux-upgrade-mod-ssl | Feb 23, 2023 | Jan 17, 2023 |
| Redhat_linux | redhat-upgrade-httpdredhat-upgrade-httpd-coreredhat-upgrade-httpd-core-debuginforedhat-upgrade-httpd-debuginforedhat-upgrade-httpd-debugsourceredhat-upgrade-httpd-develredhat-upgrade-httpd-filesystemredhat-upgrade-httpd-manualredhat-upgrade-httpd-toolsredhat-upgrade-httpd-tools-debuginforedhat-upgrade-mod_http2redhat-upgrade-mod_http2-debuginforedhat-upgrade-mod_http2-debugsourceredhat-upgrade-mod_ldapredhat-upgrade-mod_ldap-debuginforedhat-upgrade-mod_luaredhat-upgrade-mod_lua-debuginforedhat-upgrade-mod_mdredhat-upgrade-mod_md-debuginforedhat-upgrade-mod_md-debugsourceredhat-upgrade-mod_proxy_htmlredhat-upgrade-mod_proxy_html-debuginforedhat-upgrade-mod_sessionredhat-upgrade-mod_session-debuginforedhat-upgrade-mod_sslredhat-upgrade-mod_ssl-debuginfo | Feb 22, 2023 | Jan 17, 2023 | |
| Rocky_linux | rocky-upgrade-httpdrocky-upgrade-httpd-corerocky-upgrade-httpd-core-debuginforocky-upgrade-httpd-debuginforocky-upgrade-httpd-debugsourcerocky-upgrade-httpd-develrocky-upgrade-httpd-toolsrocky-upgrade-httpd-tools-debuginforocky-upgrade-mod_http2rocky-upgrade-mod_http2-debuginforocky-upgrade-mod_http2-debugsourcerocky-upgrade-mod_ldaprocky-upgrade-mod_ldap-debuginforocky-upgrade-mod_luarocky-upgrade-mod_lua-debuginforocky-upgrade-mod_mdrocky-upgrade-mod_md-debuginforocky-upgrade-mod_md-debugsourcerocky-upgrade-mod_proxy_htmlrocky-upgrade-mod_proxy_html-debuginforocky-upgrade-mod_sessionrocky-upgrade-mod_session-debuginforocky-upgrade-mod_sslrocky-upgrade-mod_ssl-debuginfo | Mar 12, 2024 | Jan 17, 2023 | |
| Suse | — | suse-upgrade-apache2suse-upgrade-apache2-develsuse-upgrade-apache2-docsuse-upgrade-apache2-eventsuse-upgrade-apache2-example-pagessuse-upgrade-apache2-preforksuse-upgrade-apache2-utilssuse-upgrade-apache2-worker | Jan 30, 2023 | Jan 17, 2023 |
| Ubuntu | ubuntu-pro-upgrade-apache2ubuntu-pro-upgrade-apache2-binubuntu-upgrade-apache2 | Mar 22, 2023 | Jan 17, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub