Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Ubuntu: USN-6729-1 Important Update for Apache HTTP Server Release

ubuntu
Calendar Grey April 11, 2024
Dist Ubuntu Esm H88
A range of vulnerabilities addressed in Apache HTTP Server on Ubuntu, impacting various releases, including long-term support (LTS) editions.
Several security issues were fixed in Apache HTTP Server.

Summary

Several security issues were fixed in Apache HTTP Server.

Software Description:

- apache2: Apache HTTP server

Details:

Orange Tsai discovered that the Apache HTTP Server incorrectly handled

validating certain input. A remote attacker could possibly use this

issue to perform HTTP request splitting attacks. (CVE-2023-38709)

Keran Mu and Jianjun Chen discovered that the Apache HTTP Server

incorrectly handled validating certain input. A remote attacker could

possibly use this issue to perform HTTP request splitting attacks.

(CVE-2024-24795)

Bartek Nowotarski discovered that the Apache HTTP Server HTTP/2 module

incorrectly handled endless continuation frames. A remote attacker could

possibly use this issue to cause the server to consume resources, leading

to a denial of service. (CVE-2024-27316)

Topics%20covered

Topics Covered

security advisory denial of service software fix update instructions ubuntu apache2 http request splitting

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 23.10:
   apache2                         2.4.57-2ubuntu2.4

Ubuntu 22.04 LTS:
   apache2                         2.4.52-1ubuntu4.9

Ubuntu 20.04 LTS:
   apache2                         2.4.41-4ubuntu3.17

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6729-1

CVE-2023-38709, CVE-2024-24795, CVE-2024-27316

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6729-1

Topics%20covered

Topics Covered

security advisory denial of service software fix update instructions ubuntu apache2 http request splitting

Package Information

https://launchpad.net/ubuntu/+source/apache2/2.4.57-2ubuntu2.4
https://launchpad.net/ubuntu/+source/apache2/2.4.52-1ubuntu4.9
https://launchpad.net/ubuntu/+source/apache2/2.4.41-4ubuntu3.17

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here