CyberzSOC

Applicability
← Back to CVE-2023-31122

CVE-2023-31122

Apache Software Foundation

Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.

Does it affect your version?

A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.

What each source says

Red Hat CSAF/VEX
precedence 100 · revised 2026-09-19
29 affected 187 fixed 101 not affected
OSV.dev (incl. GHSA)
precedence 80 · revised 2026-10-28
2 affected 2 fixed
CVE List v5 (CNA container)
precedence 60 · revised 2025-02-13
1 affected

Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.

Statements (322)

Product Status Versions Remediation Source
red_hat_enterprise_linux_6:httpd httpd as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: httpd out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:httpd httpd as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: httpd out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_6:httpd-devel httpd-devel as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: httpd-devel out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:httpd-devel httpd-devel as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: httpd-devel out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_6:httpd-manual httpd-manual as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: httpd-manual out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:httpd-manual httpd-manual as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: httpd-manual out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_6:httpd-tools httpd-tools as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: httpd-tools out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:httpd-tools httpd-tools as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: httpd-tools out of support fix in another branch csaf_redhat
openshift_pipelines:httpd.src httpd.src as a component of OpenShift Pipelines affected no version stated vendor label: httpd.src workaround fix in another branch csaf_redhat
red_hat_enterprise_linux_6:httpd.src httpd.src as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: httpd.src out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:httpd.src httpd.src as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: httpd.src out of support fix in another branch csaf_redhat
red_hat_openshift_data_science_(rhods):httpd.src httpd.src as a component of Red Hat OpenShift Data Science (RHODS) affected no version stated vendor label: httpd.src no fix planned fix in another branch csaf_redhat
red_hat_openshift_gitops:httpd.src httpd.src as a component of Red Hat OpenShift GitOps affected no version stated vendor label: httpd.src no fix planned fix in another branch csaf_redhat
red_hat_jboss_enterprise_application_platform_6:httpd22 httpd22 as a component of Red Hat JBoss Enterprise Application Platform 6 affected httpd22 out of support fix in another branch csaf_redhat
red_hat_software_collections:httpd24-httpd httpd24-httpd as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-httpd no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-httpd-devel httpd24-httpd-devel as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-httpd-devel no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-httpd-manual httpd24-httpd-manual as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-httpd-manual no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-httpd-tools httpd24-httpd-tools as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-httpd-tools no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-httpd.src httpd24-httpd.src as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-httpd.src no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-mod_ldap httpd24-mod_ldap as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-mod_ldap no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-mod_md httpd24-mod_md as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-mod_md no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-mod_proxy_html httpd24-mod_proxy_html as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-mod_proxy_html no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-mod_session httpd24-mod_session as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-mod_session no fix planned fix in another branch csaf_redhat
red_hat_software_collections:httpd24-mod_ssl httpd24-mod_ssl as a component of Red Hat Software Collections affected no version stated vendor label: httpd24-mod_ssl no fix planned fix in another branch csaf_redhat
red_hat_enterprise_linux_7:mod_ldap mod_ldap as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: mod_ldap out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:mod_proxy_html mod_proxy_html as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: mod_proxy_html out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:mod_session mod_session as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: mod_session out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_6:mod_ssl mod_ssl as a component of Red Hat Enterprise Linux 6 affected no version stated vendor label: mod_ssl out of support fix in another branch csaf_redhat
red_hat_enterprise_linux_7:mod_ssl mod_ssl as a component of Red Hat Enterprise Linux 7 affected no version stated vendor label: mod_ssl out of support fix in another branch csaf_redhat
AppStream-8.10.0.GA:httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 vendor fix → httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 vendor fix → httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 vendor fix → httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.src::httpd:2.4 httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.src (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.src::httpd:2.4 vendor fix → httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.src::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 vendor fix → httpd-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-9.4.0.GA:httpd-0:2.4.57-8.el9.aarch64 httpd-0:2.4.57-8.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-0:2.4.57-8.el9.aarch64 vendor fix → httpd-0:2.4.57-8.el9.aarch64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-0:2.4.57-8.el9.ppc64le httpd-0:2.4.57-8.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-0:2.4.57-8.el9.ppc64le vendor fix → httpd-0:2.4.57-8.el9.ppc64le (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-0:2.4.57-8.el9.s390x httpd-0:2.4.57-8.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-0:2.4.57-8.el9.s390x vendor fix → httpd-0:2.4.57-8.el9.s390x (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-0:2.4.57-8.el9.src httpd-0:2.4.57-8.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-0:2.4.57-8.el9.src vendor fix → httpd-0:2.4.57-8.el9.src (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-0:2.4.57-8.el9.x86_64 httpd-0:2.4.57-8.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-0:2.4.57-8.el9.x86_64 vendor fix → httpd-0:2.4.57-8.el9.x86_64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-0:2.4.57-8.el9.aarch64 httpd-core-0:2.4.57-8.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-0:2.4.57-8.el9.aarch64 vendor fix → httpd-core-0:2.4.57-8.el9.aarch64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-0:2.4.57-8.el9.ppc64le httpd-core-0:2.4.57-8.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-0:2.4.57-8.el9.ppc64le vendor fix → httpd-core-0:2.4.57-8.el9.ppc64le (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-0:2.4.57-8.el9.s390x httpd-core-0:2.4.57-8.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-0:2.4.57-8.el9.s390x vendor fix → httpd-core-0:2.4.57-8.el9.s390x (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-0:2.4.57-8.el9.x86_64 httpd-core-0:2.4.57-8.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-0:2.4.57-8.el9.x86_64 vendor fix → httpd-core-0:2.4.57-8.el9.x86_64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-debuginfo-0:2.4.57-8.el9.aarch64 httpd-core-debuginfo-0:2.4.57-8.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-debuginfo-0:2.4.57-8.el9.aarch64 vendor fix → httpd-core-debuginfo-0:2.4.57-8.el9.aarch64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-debuginfo-0:2.4.57-8.el9.ppc64le httpd-core-debuginfo-0:2.4.57-8.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-debuginfo-0:2.4.57-8.el9.ppc64le vendor fix → httpd-core-debuginfo-0:2.4.57-8.el9.ppc64le (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-debuginfo-0:2.4.57-8.el9.s390x httpd-core-debuginfo-0:2.4.57-8.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-debuginfo-0:2.4.57-8.el9.s390x vendor fix → httpd-core-debuginfo-0:2.4.57-8.el9.s390x (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-core-debuginfo-0:2.4.57-8.el9.x86_64 httpd-core-debuginfo-0:2.4.57-8.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-core-debuginfo-0:2.4.57-8.el9.x86_64 vendor fix → httpd-core-debuginfo-0:2.4.57-8.el9.x86_64 (RHSA-2024:2278) csaf_redhat
AppStream-8.10.0.GA:httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 vendor fix → httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 vendor fix → httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 vendor fix → httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 vendor fix → httpd-debuginfo-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-9.4.0.GA:httpd-debuginfo-0:2.4.57-8.el9.aarch64 httpd-debuginfo-0:2.4.57-8.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-debuginfo-0:2.4.57-8.el9.aarch64 vendor fix → httpd-debuginfo-0:2.4.57-8.el9.aarch64 (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-debuginfo-0:2.4.57-8.el9.ppc64le httpd-debuginfo-0:2.4.57-8.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-debuginfo-0:2.4.57-8.el9.ppc64le vendor fix → httpd-debuginfo-0:2.4.57-8.el9.ppc64le (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-debuginfo-0:2.4.57-8.el9.s390x httpd-debuginfo-0:2.4.57-8.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-debuginfo-0:2.4.57-8.el9.s390x vendor fix → httpd-debuginfo-0:2.4.57-8.el9.s390x (RHSA-2024:2278) csaf_redhat
AppStream-9.4.0.GA:httpd-debuginfo-0:2.4.57-8.el9.x86_64 httpd-debuginfo-0:2.4.57-8.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-debuginfo-0:2.4.57-8.el9.x86_64 vendor fix → httpd-debuginfo-0:2.4.57-8.el9.x86_64 (RHSA-2024:2278) csaf_redhat
AppStream-8.10.0.GA:httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 vendor fix → httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.aarch64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 vendor fix → httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.ppc64le::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 vendor fix → httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.s390x::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-8.10.0.GA:httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64 (httpd:2.4) as a component of Red Hat Enterprise Linux AppStream (v. 8) fixed httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 vendor fix → httpd-debugsource-0:2.4.37-64.module+el8.10.0+21332+dfb1b40e.x86_64::httpd:2.4 (RHSA-2024:3121) csaf_redhat
AppStream-9.4.0.GA:httpd-debugsource-0:2.4.57-8.el9.aarch64 httpd-debugsource-0:2.4.57-8.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) fixed httpd-debugsource-0:2.4.57-8.el9.aarch64 vendor fix → httpd-debugsource-0:2.4.57-8.el9.aarch64 (RHSA-2024:2278) csaf_redhat
page 1 of 6 next →

A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.