cve 2024 39884

About this tag
CVE-2024-39884 is a regression in Apache HTTP Server 2.4.60 that can cause local source files to be served raw when legacy content-type handlers like AddType-based PHP mappings are used. The vulnerability is fixed upstream, and Microsoft's Security Response Center has confirmed that Azure Linux images include the affected component, making them potentially in scope. However, this confirmation is not a guarantee that other Microsoft products are unaffected. Operators should treat MSRC's wording as a product-level attestation and perform artifact-level verification across their environments. This tag covers discussions about the vulnerability's impact on Azure Linux and cross-product risk assessment.

  1. CVE-2024-39884: Apache Regression, Azure Linux Attestation, and Cross-Product Risk

    Apache’s CVE-2024-39884 — a regression in the 2.4.60 line that can cause local source files to be served raw when legacy content-type handlers (for example, AddType-based PHP mappings) are used — is fixed upstream, and Microsoft’s Security Response Center (MSRC) has publicly confirmed that Azure...