Multiple Vulnerabilities in Apache HTTP Server Demand Immediate Action

The Apache Software Foundation has issued an urgent security advisory, disclosing multiple vulnerabilities in its widely used Apache HTTP Server. These flaws range from denial-of-service (DoS) attacks to remote code execution and unauthorized access, potentially exposing millions of websites to cyberattacks.

The vulnerabilities, tracked as CVE-2024-36387 through CVE-2024-39573, affect various components of Apache HTTP Server, including mod_proxy, mod_rewrite, and core functionalities. Some of the most critical issues include:

• CVE-2024-38472 (Important): Server-Side Request Forgery (SSRF) vulnerability on Windows systems, potentially leaking sensitive NTML hashes.
• CVE-2024-38474 (Important): Code execution and source disclosure via encoded question marks in backreferences.
• CVE-2024-38475 (Important): Unauthorized access to filesystem locations through improper escaping in mod_rewrite.
• CVE-2024-38476 (Important): Information disclosure, SSRF, or local script execution via malicious backend application output.

These vulnerabilities could allow attackers to crash servers, bypass authentication, steal sensitive data, or even take complete control of affected systems.

The Apache Software Foundation has released version 2.4.60, which addresses all reported vulnerabilities. Immediate upgrade to this version is strongly recommended.

Apache HTTP Server is one of the most popular web servers globally, powering a significant portion of the internet. The severity and widespread nature of these vulnerabilities make them a prime target for attackers.

Organizations that fail to patch promptly could face severe consequences, including website outages, data breaches, and financial losses.

Additionally, organizations should:

• Review and update configurations: Pay particular attention to mod_proxy and mod_rewrite rules, and apply necessary changes to prevent unintended behavior.
• Monitor logs for suspicious activity: Look for signs of exploitation attempts or unauthorized access.
• Implement a web application firewall (WAF): A WAF can help mitigate the risk of exploitation by filtering malicious traffic.