CVE-2024-38477CWE-476

Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request

High · published July 1, 2024

CVSS v3.1
7.5
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03153 · 87.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-07-01T18:16Z
EPSS history
Timeline
  • 01 JUL 18:16Z
    Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request
    cvelistv5