April 29, 2024, 11:31 a.m. |

Ubuntu security notices ubuntu.com

USN-6729-1 fixed vulnerabilities in Apache HTTP Server. This update
provides the corresponding updates for Ubuntu 24.04 LTS.

Original advisory details:

Orange Tsai discovered that the Apache HTTP Server incorrectly handled
validating certain input. A remote attacker could possibly use this
issue to perform HTTP request splitting attacks. (CVE-2023-38709)

Keran Mu and Jianjun Chen discovered that the Apache HTTP Server
incorrectly handled validating certain input. A remote attacker could
possibly use this issue to perform HTTP request splitting attacks.
(CVE-2024-24795)

Bartek …

advisory apache attacker attacks chen cve http http server input issue lts orange request server ubuntu update updates usn vulnerabilities

Sr. Product Manager

@ MixMode | Remote, US

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Product Security Engineer

@ ServiceNow | Hyderabad, India

Senior Application Security Engineer (Puerto Rico)

@ RTX | HPR99: Field Office – PR, Remote Location, Remote City, PR, 00921 USA