PT-2023-6410 · Apache+10 · Apache Http Server+10

David Shoon · Publicado 2023-10-19 · Atualizado 2025-12-03 · CVE-2023-31122

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions through 2.4.57

Description The issue is related to an out-of-bounds read vulnerability in the mod macro module of the Apache HTTP Server. This vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Apache HTTP Server versions through 2.4.57, update to a version later than 2.4.57 to resolve the issue. As a temporary workaround, consider disabling the mod macro module until a patch is available. Restrict access to the mod macro module to minimize the risk of exploitation.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALSA-2024:2278

ALSA-2024:3121

ALT-PU-2023-6831

ALT-PU-2023-7243

ALT-PU-2024-1938

BDU:2023-07124

BIT-APACHE-2023-31122

CESA-2024_3121

CVE-2023-31122

DLA-3818-1

DSA-5662-1

INFSA-2024_2278

INFSA-2024_3121

MGASA-2023-0304

OESA-2023-1790

OESA-2023-1802

OESA-2023-1804

OESA-2023-1805

OESA-2023-1806

OPENSUSE-SU-2023_4430-1

OPENSUSE-SU-2024:13350-1

RHSA-2024:1316

RHSA-2024:2278

RHSA-2024:3121

RHSA-2024_2278

RHSA-2024_3121

RLSA-2024:2278

RLSA-2024:3121

ROSA-SA-2024-2326

SUSE-SU-2023:4430-1

SUSE-SU-2023:4431-1

SUSE-SU-2023:4432-1

SUSE-SU-2023:4451-1

SUSE-SU-2023_4430-1

SUSE-SU-2023_4431-1

SUSE-SU-2023_4432-1

SUSE-SU-2023_4451-1

USN-6506-1

USN-6510-1

Produtos afetados

Alt Linux

Almalinux

Apache Http Server

Astra Linux

Centos

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 143

• 🔥 https://github.com/lockness-Ko/CVE-2024-27316 · Exploit
• https://github.com/mrmtwoj/apache-vulnerability-testing · Nota
• https://osv.dev/vulnerability/OESA-2023-1805 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2023-November/017025.html · Nota
• https://safe-surf.ru/specialists/bulletins-nkcki/718220 · Nota de Segurança
• https://abf.rosa.ru/advisories/ROSA-SA-2025-2851 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/attachments/20231115/856ab53f/attachment.htm · Nota
• https://bugzilla.suse.com/show_bug.cgi?id=1216424 · Nota
• https://suse.com/security/cve/CVE-2023-31122 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2243877 · Nota
• https://lists.suse.com/pipermail/sle-security-updates/attachments/20231113/9c8ac2f7/attachment.htm · Nota
• https://ubuntu.com/security/notices/USN-6506-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-07124 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2024:3121 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31122 · Aviso do Fabricante