2024-04-04 22:03:28 +00:00
{
"id" : "CVE-2023-38709" ,
"sourceIdentifier" : "security@apache.org" ,
"published" : "2024-04-04T20:15:08.047" ,
2024-06-10 18:03:10 +00:00
"lastModified" : "2024-06-10T17:16:12.647" ,
2024-04-05 14:03:28 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2024-04-04 22:03:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.\n"
2024-04-05 14:03:28 +00:00
} ,
{
"lang" : "es" ,
"value" : "La validaci\u00f3n de entrada defectuosa en el n\u00facleo de Apache permite que generadores de contenido/backend maliciosos o explotables dividan las respuestas HTTP. Este problema afecta al servidor HTTP Apache: hasta 2.4.58."
2024-04-04 22:03:28 +00:00
}
] ,
"metrics" : { } ,
"references" : [
2024-05-01 18:03:25 +00:00
{
"url" : "http://www.openwall.com/lists/oss-security/2024/04/04/3" ,
"source" : "security@apache.org"
} ,
2024-04-04 22:03:28 +00:00
{
"url" : "https://httpd.apache.org/security/vulnerabilities_24.html" ,
"source" : "security@apache.org"
2024-04-19 23:58:22 +00:00
} ,
2024-06-10 18:03:10 +00:00
{
"url" : "https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html" ,
"source" : "security@apache.org"
} ,
2024-05-03 04:03:33 +00:00
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IWSGL3QGN7KSRUGAEMF/" ,
"source" : "security@apache.org"
} ,
2024-05-04 04:03:28 +00:00
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3AJ6MDDCBJDWDPXNVJ/" ,
"source" : "security@apache.org"
} ,
2024-04-19 23:58:22 +00:00
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZWNFU7XBYYOZEZMI4ZC/" ,
"source" : "security@apache.org"
} ,
{
"url" : "https://security.netapp.com/advisory/ntap-20240415-0013/" ,
"source" : "security@apache.org"
2024-04-04 22:03:28 +00:00
}
]
}