CVE-2024-38477

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server versions 2.4.59 and earlier

Description: A null pointer dereference in the mod proxy module of Apache HTTP Server allows an attacker to crash the server via a malicious request. This issue can be exploited by a remote attacker to cause a denial of service.

Recommendations: For Apache HTTP Server versions 2.4.59 and earlier, upgrade to version 2.4.60, which fixes this issue. As a temporary workaround, consider restricting access to the mod proxy module to minimize the risk of exploitation.