CVE-2023-31122
Summary
| CVE | CVE-2023-31122 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-10-23 07:15:00 UTC |
|---|
| Updated | 2023-11-07 05:15:00 UTC |
|---|
| Description | Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 39 Update: httpd-2.4.58-1.fc39 - package-announce - Fedora Mailing-Lists |
MISC |
lists.fedoraproject.org |
|
| Apache HTTP Server 2.4 vulnerabilities - The Apache HTTP Server Project |
MISC |
httpd.apache.org |
|
| October 2023 Apache HTTP Server Vulnerabilities in NetApp Products | NetApp Product Security |
MISC |
security.netapp.com |
|
| [SECURITY] Fedora 37 Update: httpd-2.4.58-1.fc37 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 38 Update: httpd-2.4.58-1.fc38 - package-announce - Fedora Mailing-Lists |
MISC |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 150737 Apache HTTP Server Prior to 2.4.58 Multiple Security Vulnerabilities
- 199940 Ubuntu Security Notification for Apache Hypertext Transfer Protocol (HTTP) Server Vulnerabilities (USN-6506-1)
- 199946 Ubuntu Security Notification for Apache Hypertext Transfer Protocol (HTTP) Server Vulnerability (USN-6510-1)
- 243077 Red Hat Update for JBoss Core Services (RHSA-2024:1316)
- 284657 Fedora Security Update for httpd (FEDORA-2023-de4eba8d86)
- 284711 Fedora Security Update for httpd (FEDORA-2023-3d1bf0ee44)
- 285181 Fedora Security Update for httpd (FEDORA-2023-606f830772)
- 296106 Oracle Solaris 11.4 Support Repository Update (SRU) 64.157.2 Missing (CPUOCT2023)
- 356549 Amazon Linux Security Advisory for httpd24 : ALAS-2023-1877
- 356605 Amazon Linux Security Advisory for httpd : ALAS2-2023-2322
- 356896 Amazon Linux Security Advisory for httpd : ALAS2023-2023-433
- 379384 IBM Hypertext Transfer Protocol Server (HTTP Server) Vulnerability (7060076)
- 503432 Alpine Linux Security Update for apache2
- 505847 Alpine Linux Security Update for apache2
- 673364 EulerOS Security Update for httpd (EulerOS-SA-2023-3273)
- 673411 EulerOS Security Update for httpd (EulerOS-SA-2023-3334)
- 673591 EulerOS Security Update for httpd (EulerOS-SA-2024-1085)
- 673592 EulerOS Security Update for httpd (EulerOS-SA-2023-3302)
- 673720 EulerOS Security Update for httpd (EulerOS-SA-2024-1273)
- 673736 EulerOS Security Update for httpd (EulerOS-SA-2024-1061)
- 673767 EulerOS Security Update for httpd (EulerOS-SA-2024-1143)
- 674081 EulerOS Security Update for httpd (EulerOS-SA-2023-3245)
- 691333 Free Berkeley Software Distribution (FreeBSD) Security Update for apache httpd (f923205f-6e66-11ee-85eb-84a93843eb75)
- 755255 SUSE Enterprise Linux Security Update for apache2 (SUSE-SU-2023:4432-1)
- 755256 SUSE Enterprise Linux Security Update for apache2 (SUSE-SU-2023:4431-1)
- 755257 SUSE Enterprise Linux Security Update for apache2 (SUSE-SU-2023:4430-1)
- 755268 SUSE Enterprise Linux Security Update for apache2 (SUSE-SU-2023:4451-1)
