Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-34798HistorySep 16, 2021 - 3:15 p.m.
CVE-2021-34798
2021-09-1615:15:07
Alpine Linux Development Team
security.alpinelinux.org
37
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.9 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.5%
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.11-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.12-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.13-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | apache2 | < 2.4.49-r0 | UNKNOWN |
Related
osv
osv
CVE-2021-34798
2021-09-16 15:15:07
BIT-apache-2021-34798
2024-03-06 10:55:30
Moderate: httpd:2.4 security update
2022-03-15 09:10:44
cvelist
cvelist
CVE-2021-34798 NULL pointer dereference in httpd core
2021-09-16 14:40:17
debiancve
debiancve
CVE-2021-34798
2021-09-16 15:15:07
veracode
veracode
Denial Of Service (DoS)
2021-09-19 21:02:16
f5
f5
K72382141 : Apache HTTPD vulnerability CVE-2021-34798
2021-10-13 00:00:00
cve
cve
CVE-2021-34798
2021-09-16 15:15:07
cnvd
cnvd
Apache HTTP Server code issue vulnerability
2021-09-22 00:00:00
nvd
nvd
CVE-2021-34798
2021-09-16 15:15:07
redhatcve
redhatcve
CVE-2021-34798
2021-09-16 21:57:58
prion
prion
Null pointer dereference
2021-09-16 15:15:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2021-34798 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
CVE-2021-34798 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
ubuntucve
ubuntucve
CVE-2021-34798
2021-09-16 00:00:00
httpd
httpd
Apache Httpd < 2.4.49 : NULL pointer dereference in httpd core
2021-09-16 00:00:00
nessus
nessus
F5 Networks BIG-IP : Apache HTTPD vulnerability (K72382141)
2021-10-28 00:00:00
Oracle Linux 7 : httpd (ELSA-2021-9619)
2021-12-16 00:00:00
RHEL 8 : httpd:2.4 (RHSA-2022:0891)
2022-03-15 00:00:00
oraclelinux
oraclelinux
httpd:2.4 security update
2022-01-06 00:00:00
httpd:2.4 security update
2022-03-16 00:00:00
httpd security update
2021-12-16 00:00:00
rocky
rocky
httpd:2.4 security update
2022-03-15 09:10:44
almalinux
almalinux
Moderate: httpd:2.4 security update
2022-03-15 09:10:44
redhat
redhat
(RHSA-2022:0891) Moderate: httpd:2.4 security update
2022-03-15 09:10:44
(RHSA-2022:0143) Important: httpd security update
2022-01-17 08:16:34
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3299-1)
2021-10-07 00:00:00
Ubuntu: Security Advisory (USN-5090-2)
2022-08-26 00:00:00
Apache HTTP Server < 2.4.49 Multiple Vulnerabilities - Linux
2021-09-17 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2021-09-27 00:00:00
Apache HTTP Server regression
2021-09-28 00:00:00
Apache HTTP Server regression
2021-09-28 00:00:00
debian
debian
[SECURITY] [DLA 2776-1] apache2 security update
2021-10-02 16:07:56
[SECURITY] [DSA 4982-1] apache2 security update
2021-10-08 20:56:04
ics
ics
Siemens Apache HTTP Server (Update A)
2022-10-13 12:00:00
Mitsubishi Electric MELSOFT iQ AppPortal
2022-05-12 12:00:00
photon
photon
suse
suse
Security update for apache2 (important)
2021-10-26 00:00:00
Security update for apache2 (important)
2021-11-02 00:00:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2022-01-25 17:31:14
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.49-alt1
2021-10-04 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.49-alt1
2021-09-23 00:00:00
slackware
slackware
[slackware-security] httpd
2021-09-17 04:22:20
mageia
mageia
Updated apache packages fix security vulnerability
2021-09-23 07:49:29
freebsd
freebsd
Apache httpd -- multiple vulnerabilities
2021-09-16 00:00:00
cisco
cisco
kaspersky
kaspersky
KLA12370 Multiple vulnerabilities in Apache HTTP Server
2021-09-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2158
2023-04-25 11:30:17
Advisory ROSA-SA-2023-2159
2023-04-25 11:49:15
amazon
amazon
Important: httpd24
2021-10-15 07:52:00
Important: httpd
2021-10-15 07:57:00
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34
2021-09-20 13:58:04
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.9 High
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
77.5%
Related for ALPINE:CVE-2021-34798