CVE-2024-42516

Kenndaten

  • CVE.org (extern): Record bei CVE.org oeffnen
  • CVSS (CVE.org): 7.5
  • EPSS (FIRST): Score —, Perzentil —
  • EPSS-Stand: —
  • Veroeffentlicht (CVE.org): 2025-07-10
  • Zuletzt angereichert: 2026-10-20 03:32 UTC
  • Externe Referenzen (Anzahl): 0
  • Anreicherungs-Plugins (Referenzen): —
  • CVSS (Quelle / verkn. Eintraege): 9.8 — Werte aus Feed-Eintraegen; CVSS (CVE.org) kommt aus Anreicherung cve_org.

Eintraege mit Bezug zu CVE-2024-42516

Veroeffentlicht Quelle Titel Severity Kategorie
2026-10-15 13:12

cert_bund

[UPDATE] [hoch] Apache HTTP Server: Mehrere Schwachstellen

 CRITICAL government_cert
2026-08-25 06:16

cert_bund

[UPDATE] [kritisch] Oracle Fusion Middleware: Mehrere Schwachstellen

 CRITICAL government_cert
2025-07-10 00:00

apache_httpd_sec

CVE-2024-42516: HTTP response splitting in the core of Apache HTTP Server allows an attacker who can manipulate the Content-Type response headers of applications hosted or proxied by the server can split the HTTP response. This vulnerability was described as CVE-2023-38709 but the patch included in Apache HTTP Server 2.4.59 did not address the issue. Users are recommended to upgrade to version 2.4.64, which fixes this issue.

 HIGH vendor_advisory
Alle CVEs