openEuler update for httpd



| Updated: 2024-07-26
Risk Medium
Patch available YES
Number of vulnerabilities 3
CVE-ID CVE-2023-38709
CVE-2024-24795
CVE-2024-27316
CWE-ID CWE-113
CWE-400
Exploitation vector Network
Public exploit Public exploit code for vulnerability #3 is available.
Vulnerable software
 openEuler
Operating systems & Components / Operating system

httpd-help
Operating systems & Components / Operating system package or component

httpd-filesystem
Operating systems & Components / Operating system package or component

mod_ldap
Operating systems & Components / Operating system package or component

httpd-tools
Operating systems & Components / Operating system package or component

httpd-debugsource
Operating systems & Components / Operating system package or component

mod_proxy_html
Operating systems & Components / Operating system package or component

httpd-debuginfo
Operating systems & Components / Operating system package or component

mod_ssl
Operating systems & Components / Operating system package or component

httpd-devel
Operating systems & Components / Operating system package or component

mod_md
Operating systems & Components / Operating system package or component

mod_session
Operating systems & Components / Operating system package or component

httpd
Operating systems & Components / Operating system package or component

Vendor openEuler

Security Bulletin

This security bulletin contains information about 3 vulnerabilities.

1) HTTP response splitting

EUVDB-ID: #VU88151

Risk: Medium

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-38709

CWE-ID: CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform HTTP splitting attacks.

The vulnerability exists due to software does not correctly process CRLF character sequences. A malicious or exploitable backend/content generators can send specially crafted response containing CRLF sequence and make the application to send a split HTTP response.

Successful exploitation of the vulnerability may allow an attacker perform cache poisoning attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1 - 22.03 LTS

httpd-help: before 2.4.43-24

httpd-filesystem: before 2.4.43-24

mod_ldap: before 2.4.43-24

httpd-tools: before 2.4.43-24

httpd-debugsource: before 2.4.43-24

mod_proxy_html: before 2.4.43-24

httpd-debuginfo: before 2.4.43-24

mod_ssl: before 2.4.43-24

httpd-devel: before 2.4.43-24

mod_md: before 2.4.43-24

mod_session: before 2.4.43-24

httpd: before 2.4.43-24

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1553


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) HTTP response splitting

EUVDB-ID: #VU88152

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-24795

CWE-ID: CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform HTTP splitting attacks.

The vulnerability exists due to software does not correctly process CRLF character sequences in multiple modules. A remote attacker can inject malicious response headers into backend applications and perform an HTTP desynchronization attack.

Successful exploitation of the vulnerability may allow an attacker perform cache poisoning attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1 - 22.03 LTS

httpd-help: before 2.4.43-24

httpd-filesystem: before 2.4.43-24

mod_ldap: before 2.4.43-24

httpd-tools: before 2.4.43-24

httpd-debugsource: before 2.4.43-24

mod_proxy_html: before 2.4.43-24

httpd-debuginfo: before 2.4.43-24

mod_ssl: before 2.4.43-24

httpd-devel: before 2.4.43-24

mod_md: before 2.4.43-24

mod_session: before 2.4.43-24

httpd: before 2.4.43-24

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1553


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU88153

Risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2024-27316

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when handling HTTP/2 requests. A remote attacker can send specially crafted HTTP/2 requests to the server and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

openEuler: 20.03 LTS SP1 - 22.03 LTS

httpd-help: before 2.4.43-24

httpd-filesystem: before 2.4.43-24

mod_ldap: before 2.4.43-24

httpd-tools: before 2.4.43-24

httpd-debugsource: before 2.4.43-24

mod_proxy_html: before 2.4.43-24

httpd-debuginfo: before 2.4.43-24

mod_ssl: before 2.4.43-24

httpd-devel: before 2.4.43-24

mod_md: before 2.4.43-24

mod_session: before 2.4.43-24

httpd: before 2.4.43-24

CPE2.3 External links

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1553


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###