{"schemaVersion":3,"id":"CVE-2024-40725","aliases":["ALPINE-CVE-2024-40725","SUSE-SU-2024:3742-1","SUSE-SU-2024:3750-1","SUSE-SU-2024:3864-1","UBUNTU-CVE-2024-40725","USN-6902-1","DEBIAN-CVE-2024-40725"],"status":"published","duplicateOf":null,"title":null,"description":"A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. \"AddType\" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.\n\nUsers are recommended to upgrade to version 2.4.62, which fixes this issue.","dates":{"published":"2024-07-18T09:32:43.929Z","modified":"2025-03-14T17:27:57.926Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Alpine","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04168,"percentile":0.90767,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.04168},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04168,"percentile":0.90767}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04168,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04168,"percentile":0.90767}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-668","name":"Exposure of Resource to Wrong Sphere","description":"The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/668.html"}],"affected":[{"vendor":"apache software foundation","product":"apache http server","name":"Apache HTTP Server","label":"apache http server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.4.60, ≤ 2.4.61","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.4.60, ≤ 2.4.61","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_http_server"},{"vendor":"apache","product":"http_server","name":"http server","label":"http_server","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.4.60","noFixRecorded":false,"fixedIn":null},{"text":"2.4.61","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.4.60 | 2.4.61","eol":{"isEol":false,"eolDate":null,"matchMethod":"cpe","cycle":{"name":"2.4","label":"2.4","eolFrom":null,"isLts":false,"isMaintained":true,"latestVersion":"2.4.69"},"product":{"name":"apache-http-server","label":"Apache HTTP Server","category":"server-app"}},"hubHref":"/vendor/apache/http_server"},{"vendor":"alpine","product":"apache2","name":"apache2","label":"apache2","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/apache2","purlType":"apk","versions":[{"text":"< 2.4.62-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.62-r0","eol":null,"hubHref":null},{"vendor":"debian","product":"apache2","name":"apache2","label":"apache2","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/apache2","purlType":"deb","versions":[{"text":"< 2.4.62-1~deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.62-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.62-1~deb12u1 | < 2.4.62-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"apache2","name":"apache2","label":"apache2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/apache2","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.4.41-4ubuntu3.21","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.52-1ubuntu4.12","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.58-1ubuntu8.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.4.41-4ubuntu3.21 | < 2.4.52-1ubuntu4.12 | < 2.4.58-1ubuntu8.4","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-devel&distro=openSUSE Leap 15.6","name":"apache2-devel","label":"apache2-devel&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-devel&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-event&distro=openSUSE Leap 15.6","name":"apache2-event","label":"apache2-event&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-event&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-manual&distro=openSUSE Leap 15.6","name":"apache2-manual","label":"apache2-manual&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-manual&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-prefork&distro=openSUSE Leap 15.6","name":"apache2-prefork","label":"apache2-prefork&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-prefork&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-utils&distro=openSUSE Leap 15.6","name":"apache2-utils","label":"apache2-utils&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-utils&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2-worker&distro=openSUSE Leap 15.6","name":"apache2-worker","label":"apache2-worker&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2-worker&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2&distro=openSUSE Leap 15.5","name":"apache2","label":"apache2&distro=openSUSE Leap 15.5","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2&distro=openSUSE Leap 15.5","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"apache2&distro=openSUSE Leap 15.6","name":"apache2","label":"apache2&distro=openSUSE Leap 15.6","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/apache2&distro=openSUSE Leap 15.6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-devel&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","name":"apache2-devel","label":"apache2-devel&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-devel&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-event&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","name":"apache2-event","label":"apache2-event&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-event&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-prefork&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","name":"apache2-prefork","label":"apache2-prefork&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-prefork&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-tls13&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"apache2-tls13","label":"apache2-tls13&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-tls13&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-tls13&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"apache2-tls13","label":"apache2-tls13&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-tls13&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-tls13&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"apache2-tls13","label":"apache2-tls13&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-tls13&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-utils&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","name":"apache2-utils","label":"apache2-utils&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-utils&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2-worker&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","name":"apache2-worker","label":"apache2-worker&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2-worker&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Package Hub 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.58-150600.5.26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.58-150600.5.26.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Module for Server Applications 15 SP6","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Server 15 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"apache2","label":"apache2&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 2.4.51-35.63.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-35.63.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Manager Proxy 4.3","name":"apache2","label":"apache2&distro=SUSE Manager Proxy 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Manager Proxy 4.3","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null},{"vendor":"suse","product":"apache2&distro=SUSE Manager Server 4.3","name":"apache2","label":"apache2&distro=SUSE Manager Server 4.3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/apache2&distro=SUSE Manager Server 4.3","purlType":"rpm","versions":[{"text":"< 2.4.51-150400.6.37.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.51-150400.6.37.1","eol":null,"hubHref":null}],"affectedCount":36,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","label":"httpd.apache.org/security/vulnerabilities_24.html","hostname":"httpd.apache.org","tags":["Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240808-0007/","label":"security.netapp.com/advisory/ntap-20240808-0007/","hostname":"security.netapp.com","tags":[]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-40725","label":"security.alpinelinux.org/vuln/CVE-2024-40725","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243742-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20243742-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1228097","label":"bugzilla.suse.com/1228097","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40725","label":"www.suse.com/security/cve/CVE-2024-40725","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243750-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20243750-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243864-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20243864-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-40725","label":"ubuntu.com/security/CVE-2024-40725","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40725","label":"www.cve.org/CVERecord?id=CVE-2024-40725","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-6902-1","label":"ubuntu.com/security/notices/USN-6902-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-40725","label":"security-tracker.debian.org/tracker/CVE-2024-40725","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40725","label":"nvd.nist.gov/vuln/detail/CVE-2024-40725","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["MGASA-2024-0272","OPENSUSE-SU-2024:14245-1","SUSE-SU-2025:02241-1","SUSE-SU-2026:2686-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:14245-1","SUSE-SU-2025:02241-1","SUSE-SU-2026:2686-1"]},"timeline":[{"kind":"published","date":"2024-07-18T09:32:43.929Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-03-14T17:27:57.926Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T02:39:08.897Z","stale":false,"partial":false}}