Security Advisory

CVE-2024-38477

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-07-01 18:16:11
Last updated 2025-11-03 21:55:44
Assigner apache
State PUBLISHED

Description

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.