CVE-2024-38477

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

Null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request.

Risk Assessment

An attacker can cause the server to crash, leading to service interruption and potential loss of application availability.

Recommendation

Upgrade Apache HTTP Server to version 2.4.60, which fixes this issue.

Original NVD description (English source)

null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.