CVE-2023-38709

Katalog CVE

CVSS 7.3 · High EPSS 3,9%

Kerentanan Improper Validation of Specified Quantity in Input pada apache http server, debian linux +5 lainnya. Skor CVSS 3.1 7.3 (High) menurut CISA ADP.

Deskripsi (NVD)

Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.

Rincian

Terbit di NVD

4 April 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1284: Improper Validation of Specified Quantity in Input

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• http://seclists.org/fulldisclosure/2024/Jul/18 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2024/04/04/3 mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/05/msg00013.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I2N2NZEX3MR64IW... mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LX5U34KYGDYPRH3... mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WNV4SZAPVS43DZW... mailing list · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20240415-0013/ advisory pihak ketiga
• https://support.apple.com/kb/HT214119 advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2025/07/10/2
• http://www.openwall.com/lists/oss-security/2025/07/10/3