ALSA-2023:1673 - Important: httpd:2.4 security update
Summary
ALSA-2023:1673: Important: httpd:2.4 security update. Affects httpd versions < 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5. Fixed in 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. It is widely used for hosting websites and serving web content. The vulnerability affects the httpd package in AlmaLinux 8.
Vulnerability Detail
The vulnerability (CVE-2023-25690) is related to HTTP request splitting and affects the mod_rewrite and mod_proxy modules in the Apache HTTP Server. An attacker can exploit this vulnerability to manipulate HTTP requests and potentially perform various attacks, such as injecting malicious content or bypassing security measures. The impact of this vulnerability can range from information disclosure to remote code execution, depending on the specific configuration and usage of the affected server.
How To Fix
Minimum fixed version
2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5
This is the first release that contains the fix.
sudo dnf update httpdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the security update as soon as possible.
Conclusion
The httpd package in AlmaLinux 8 is affected by a security vulnerability (CVE-2023-25690) related to HTTP request splitting. This vulnerability can have serious consequences, ranging from information disclosure to remote code execution. It is crucial to update the httpd package to the recommended version or later to mitigate the risks associated with this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for httpd →
FAQ
The impact of this vulnerability can range from information disclosure to remote code execution, depending on the specific configuration and usage of the affected server.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and it will provide real-time monitoring and alerts for open-source vulnerabilities.
At the time of this advisory, there is no known public exploit for this vulnerability. However, it is important to apply the security update to mitigate any potential risks.
In addition to applying the security update, it is recommended to follow best practices for securing web servers, such as regularly updating software, implementing strong access controls, and monitoring for suspicious activity.
You can refer to the CVE page for CVE-2023-25690 for more detailed information about the vulnerability, including its CVSS score, acknowledgments, and related references.
Related vulnerabilities
Recent vulnerabilities recorded for httpd.
