Lucene search
GoogleOSV:CVE-2024-39884HistoryJul 04, 2024 - 9:15 a.m.
CVE-2024-39884
2024-07-0409:15:04
Google
osv.dev
8
apache http server
regression
source code disclosure
upgrade
version 2.4.61
A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers. “AddType” and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.
Users are recommended to upgrade to version 2.4.61, which fixes this issue.
Related
nvd
nvd
CVE-2024-39884
2024-07-04 09:15:04
CVE-2024-40725
2024-07-18 10:15:02
nessus
nessus
Photon OS 5.0: Httpd PHSA-2024-5.0-0330
2024-07-24 00:00:00
Photon OS 3.0: Httpd PHSA-2024-3.0-0774
2024-07-27 00:00:00
Slackware Linux 15.0 / current httpd Vulnerability (SSA:2024-185-02)
2024-07-03 00:00:00
vulnrichment
vulnrichment
debiancve
debiancve
CVE-2024-39884
2024-07-04 09:15:04
CVE-2024-40725
2024-07-18 10:15:02
openvas
openvas
Apache HTTP Server 2.4.60 Information Disclosure Vulnerability - Linux
2024-07-04 00:00:00
Slackware: Security Advisory (SSA:2024-185-02)
2024-07-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:3061-1)
2024-08-30 00:00:00
osv
osv
BIT-apache-2024-39884
2024-07-09 07:16:13
Security update for apache2
2024-08-29 07:14:03
CVE-2024-40725
2024-07-18 10:15:02
freebsd
freebsd
Apache httpd -- source code disclosure
2024-07-04 00:00:00
Apache httpd -- Source code disclosure with handlers configured via AddType
2024-07-17 00:00:00
alpinelinux
alpinelinux
CVE-2024-39884
2024-07-04 09:15:04
CVE-2024-40725
2024-07-18 10:15:02
kaspersky
kaspersky
KLA70210 SB vulnerability in Apache HTTP Server
2024-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2024-39884
2024-07-04 00:00:00
CVE-2024-40725
2024-07-17 00:00:00
f5
f5
K000140579: Apache vulnerability CVE-2024-39884
2024-08-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-39884 affecting package httpd for versions less than 2.4.62-1
2024-07-26 17:52:50
CVE-2024-39884 affecting package httpd for versions less than 2.4.61-1
2024-08-14 20:43:58
cve
cve
CVE-2024-39884
2024-07-04 09:15:04
CVE-2024-40725
2024-07-18 10:15:02
cvelist
cvelist
slackware
slackware
[slackware-security] httpd
2024-07-03 21:26:05
redhatcve
redhatcve
CVE-2024-39884
2024-07-04 11:06:38
CVE-2024-40725
2024-07-18 19:29:49
photon
photon
Critical Photon OS Security Update - PHSA-2024-3.0-0774
2024-07-26 00:00:00
Critical Photon OS Security Update - PHSA-2024-4.0-0659
2024-07-25 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0330
2024-07-24 00:00:00
amazon
amazon
Important: httpd
2024-08-01 03:01:00
Important: httpd
2024-07-18 02:00:00
ibm
ibm
redos
redos
ROS-20240812-15
2024-08-12 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2024-07-21 00:22:37
Updated apache packages fix security vulnerabilities
2024-07-09 10:01:06
ubuntu
ubuntu
Apache HTTP Server regression
2024-07-11 00:00:00
Apache HTTP Server vulnerabilities
2024-07-08 00:00:00