Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-26690HistoryJun 10, 2021 - 7:15 a.m.
CVE-2021-26690
2021-06-1007:15:07
Debian Security Bug Tracker
security-tracker.debian.org
22
apache http server
null pointer dereference
mod_session
denial of service
unix
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.082
Percentile
94.5%
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 11 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 999 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 13 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
Related
oraclelinux
oraclelinux
httpd security update
2021-11-04 00:00:00
httpd:2.4 security update
2021-11-11 00:00:00
httpd:2.4 security, bug fix, and enhancement update
2021-11-16 00:00:00
alpinelinux
alpinelinux
CVE-2021-26690
2021-06-10 07:15:07
osv
osv
BIT-apache-2021-26690
2024-03-06 10:56:26
CVE-2021-26690
2021-06-10 07:15:07
Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-11-09 08:52:38
nessus
nessus
Oracle Linux 7 : httpd (ELSA-2021-9541)
2021-11-04 00:00:00
Oracle Linux 8 : httpd:2.4 (ELSA-2021-9545)
2021-11-11 00:00:00
CBL Mariner 2.0 Security Update: httpd (CVE-2021-26690)
2023-03-20 00:00:00
f5
f5
K41320158 : Apache vulnerability CVE-2021-26690
2022-05-10 00:00:00
veracode
veracode
Denial Of Service(DoS)
2021-06-13 03:24:50
redhatcve
redhatcve
CVE-2021-26690
2021-06-07 06:12:59
httpd
httpd
Apache Httpd < 2.4.48 : mod_session NULL pointer dereference
2021-02-08 00:00:00
ubuntucve
ubuntucve
CVE-2021-26690
2021-06-10 00:00:00
cnvd
cnvd
Apache HTTP Server Code Issue Vulnerability (CNVD-2022-13199)
2021-06-11 00:00:00
prion
prion
Null pointer dereference
2021-06-10 07:15:00
cbl_mariner
cbl_mariner
CVE-2021-26690 affecting package httpd for versions less than 2.4.46-10
2022-04-09 06:51:57
CVE-2021-26690 affecting package httpd 2.4.46-6
2021-07-08 21:56:40
cvelist
cvelist
CVE-2021-26690 mod_session NULL pointer dereference
2021-06-10 07:10:22
nvd
nvd
CVE-2021-26690
2021-06-10 07:15:07
cve
cve
CVE-2021-26690
2021-06-10 07:15:07
rocky
rocky
httpd:2.4 security, bug fix, and enhancement update
2021-11-09 08:52:38
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2298)
2021-08-09 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2333)
2021-09-04 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2381)
2021-09-15 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: httpd:2.4 security, bug fix, and enhancement update
2021-11-09 08:52:38
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2021-06-21 00:00:00
Apache HTTP Server vulnerabilities
2021-06-21 00:00:00
debian
debian
[SECURITY] [DSA 4937-1] apache2 security update
2021-07-08 17:14:14
[SECURITY] [DLA 2706-1] apache2 security update
2021-07-09 08:50:21
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0365
2021-06-30 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0409
2021-07-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-0409
2021-07-01 00:00:00
suse
suse
Security update for apache2 (important)
2021-07-10 00:00:00
Security update for apache2 (important)
2021-06-24 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2021-07-17 00:00:00
slackware
slackware
[slackware-security] httpd
2021-06-07 19:07:12
amazon
amazon
Medium: httpd
2021-07-01 00:59:00
Medium: httpd24
2021-07-08 18:38:00
Important: httpd
2021-06-16 20:37:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-06-16 23:22:25
kaspersky
kaspersky
KLA12369 Multiple vulnerabilities in Apache HTTP Server
2021-06-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-06-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2159
2023-04-25 11:49:15
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34
2021-09-20 13:58:04
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.082
Percentile
94.5%
Related for DEBIANCVE:CVE-2021-26690