What is the severity of RHSA-2023:1597?

The severity of RHSA-2023:1597 is considered critical due to HTTP request splitting vulnerabilities.

What does CVE-2023-25690 in RHSA-2023:1597 refer to?

CVE-2023-25690 refers to a vulnerability that allows HTTP request splitting through the use of mod_rewrite and mod_proxy in httpd.

How do I fix RHSA-2023:1597?

To fix RHSA-2023:1597, update the httpd package to version 2.4.37-47.module+el8.6.0+18507+843660a1.4 or higher.

Which packages are affected by RHSA-2023:1597?

The affected packages include httpd, httpd-debuginfo, httpd-tools, and several other related packages in the specified version range.

Is RHSA-2023:1597 related to Apache HTTP Server vulnerabilities?

Yes, RHSA-2023:1597 is related to vulnerabilities in the Apache HTTP Server that could allow for HTTP request splitting.

Vulnerability/
RHSA-2023:1597

4/4/2023

10/10/2024

RHSA-2023:1597: Important: httpd:2.4 security update

First published: Tue Apr 04 2023(Updated: )

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.<br>Security Fix(es):<br><li> httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Reference Links

https://access.redhat.com/errata/RHSA-2023:1597 (Advisory)

Frequently Asked Questions

What is the severity of RHSA-2023:1597?
The severity of RHSA-2023:1597 is considered critical due to HTTP request splitting vulnerabilities.
What does CVE-2023-25690 in RHSA-2023:1597 refer to?
CVE-2023-25690 refers to a vulnerability that allows HTTP request splitting through the use of mod_rewrite and mod_proxy in httpd.
How do I fix RHSA-2023:1597?
To fix RHSA-2023:1597, update the httpd package to version 2.4.37-47.module+el8.6.0+18507+843660a1.4 or higher.
Which packages are affected by RHSA-2023:1597?
The affected packages include httpd, httpd-debuginfo, httpd-tools, and several other related packages in the specified version range.
Is RHSA-2023:1597 related to Apache HTTP Server vulnerabilities?
Yes, RHSA-2023:1597 is related to vulnerabilities in the Apache HTTP Server that could allow for HTTP request splitting.

agent/severity
agent/type
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/title
agent/remedy
agent/description
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2023:1597
agent/software-canonical-lookup
agent/references
agent/event
agent/tags
agent/source
package-manager/redhat