VDB
RHSA-2026:53371
RHSA-2026:53371
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in httpd. The response headers are not sanitized before an HTTP response is sent when a malicious backend can insert a Content-Type, Content-Encoding, or some other headers. These issues lead to HTTP response splitting. This CVE provides a "complete" fix for CVE-2023-38709.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:296963717d1d077fc4a37a323ab0a34843b0b5d3eeaa15af0a5ca07b83dcd2c1_arm64 as a component of Red Hat Insights proxy 1.5 | * |
| Red Hat | registry.redhat.io/insights-proxy/insights-proxy-container-rhel9@sha256:314da33085b943c6365ba0bb1b3fe311e3c9002d2dd0d1a206965bf21c412308_amd64 as a component of Red Hat Insights proxy 1.5 | * |
Timeline
- Aug 11, 2026 CVE Published
- Oct 8, 2026 CVE Updated
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Distribution Patch
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
- Oct 8, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:53371 advisory
- https://access.redhat.com/security/cve/CVE-2024-42516 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2026-10879 advisory
- https://access.redhat.com/security/cve/CVE-2026-13757 advisory
- https://access.redhat.com/security/cve/CVE-2026-14380 advisory
- https://access.redhat.com/security/cve/CVE-2026-14739 advisory
- https://access.redhat.com/security/cve/CVE-2026-24072 advisory
- https://access.redhat.com/security/cve/CVE-2026-29169 advisory
- https://access.redhat.com/security/cve/CVE-2026-33006 advisory
- https://access.redhat.com/security/cve/CVE-2026-34355 advisory
- https://access.redhat.com/security/cve/CVE-2026-34356 advisory
- https://access.redhat.com/security/cve/CVE-2026-41989 advisory
- https://access.redhat.com/security/cve/CVE-2026-42535 advisory
- https://access.redhat.com/security/cve/CVE-2026-42536 advisory
- https://access.redhat.com/security/cve/CVE-2026-43951 advisory
- https://access.redhat.com/security/cve/CVE-2026-44119 advisory
- https://access.redhat.com/security/cve/CVE-2026-44185 advisory
- https://access.redhat.com/security/cve/CVE-2026-44186 advisory
- https://access.redhat.com/security/cve/CVE-2026-44631 advisory
…and 163 more