Lucene search
GoogleOSV:USN-5090-2HistorySep 27, 2021 - 4:46 p.m.
apache2 vulnerabilities
2021-09-2716:46:11
Google
osv.dev
9
USN-5090-1 fixed several vulnerabilities in Apache. This update provides
the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that the Apache HTTP Server incorrectly handled certain
malformed requests. A remote attacker could possibly use this issue to
cause the server to crash, resulting in a denial of service.
(CVE-2021-34798)
It was discovered that the Apache HTTP Server incorrectly handled escaping
quotes. If the server was configured with third-party modules, a remote
attacker could use this issue to cause the server to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2021-39275)
It was discovered that the Apache mod_proxy module incorrectly handled
certain request uri-paths. A remote attacker could possibly use this issue
to cause the server to forward requests to arbitrary origin servers.
(CVE-2021-40438)
Related
nessus
nessus
Debian DLA-2776-1 : apache2 - LTS security update
2021-10-02 00:00:00
EulerOS 2.0 SP5 : httpd (EulerOS-SA-2021-2931)
2021-12-31 00:00:00
Ubuntu 16.04 ESM : Apache HTTP Server vulnerabilities (USN-5090-2)
2021-09-27 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:3299-1)
2021-10-07 00:00:00
Debian: Security Advisory (DLA-2776-1)
2021-10-03 00:00:00
Ubuntu: Security Advisory (USN-5090-2)
2022-08-26 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2021-09-27 00:00:00
Apache HTTP Server regression
2021-09-28 00:00:00
Apache HTTP Server regression
2021-09-28 00:00:00
ibm
ibm
debian
debian
[SECURITY] [DLA 2776-1] apache2 security update
2021-10-02 16:07:56
[SECURITY] [DSA 4982-1] apache2 security update
2021-10-08 20:56:04
ics
ics
Siemens Apache HTTP Server (Update A)
2022-10-13 12:00:00
osv
osv
apache2 - security update
2021-10-02 00:00:00
apache2 - security update
2021-10-08 00:00:00
Moderate: httpd:2.4 security update
2022-03-15 09:10:44
suse
suse
Security update for apache2 (important)
2021-10-26 00:00:00
Security update for apache2 (important)
2021-11-02 00:00:00
oraclelinux
oraclelinux
httpd:2.4 security update
2022-01-06 00:00:00
httpd:2.4 security update
2022-03-16 00:00:00
httpd security update
2021-12-16 00:00:00
rocky
rocky
httpd:2.4 security update
2022-03-15 09:10:44
2.4 bug fix update
2021-11-10 09:00:43
almalinux
almalinux
Moderate: httpd:2.4 security update
2022-03-15 09:10:44
redhat
redhat
(RHSA-2022:0891) Moderate: httpd:2.4 security update
2022-03-15 09:10:44
(RHSA-2022:0143) Important: httpd security update
2022-01-17 08:16:34
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.49-alt1
2021-10-04 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.49-alt1
2021-09-23 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2021-09-23 07:49:29
freebsd
freebsd
Apache httpd -- multiple vulnerabilities
2021-09-16 00:00:00
cisco
cisco
slackware
slackware
[slackware-security] httpd
2021-09-17 04:22:20
kaspersky
kaspersky
KLA12370 Multiple vulnerabilities in Apache HTTP Server
2021-09-16 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2158
2023-04-25 11:30:17
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2022-01-25 17:31:14
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2021-11-17 14:59:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0437
2021-10-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-0309
2021-10-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-3.0-0309
2021-10-02 00:00:00
amazon
amazon
Important: httpd
2021-10-15 07:57:00
Important: httpd24
2021-10-15 07:52:00
cvelist
cvelist
CVE-2021-34798 NULL pointer dereference in httpd core
2021-09-16 14:40:17
CVE-2021-40438 mod_proxy SSRF
2021-09-16 14:40:23
debiancve
debiancve
veracode
veracode
Denial Of Service (DoS)
2021-09-20 15:14:40
cbl_mariner
cbl_mariner
CVE-2021-39275 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
CVE-2021-39275 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
CVE-2021-34798 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
httpd
httpd
Apache Httpd < 2.4.49 : ap_escape_quotes buffer overflow
2021-09-16 00:00:00
Apache Httpd < 2.4.49 : NULL pointer dereference in httpd core
2021-09-16 00:00:00
f5
f5
K20622400 : Apache HTTP server vulnerability CVE-2021-39275
2021-10-25 00:00:00
K01552024 : Apache vulnerability CVE-2021-40438
2021-10-21 00:00:00
alpinelinux
alpinelinux
prion
prion
Input validation
2021-09-16 15:15:00
Null pointer dereference
2021-09-16 15:15:00
Design/Logic Flaw
2021-09-16 15:15:00
nvd
nvd
CVE-2021-34798
2021-09-16 15:15:07
redhatcve
redhatcve
CVE-2021-34798
2021-09-16 21:57:58
CVE-2021-40438
2021-09-16 20:45:58
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Apache Http Server
2023-12-12 11:56:23
Exploit for Server-Side Request Forgery in Apache Http Server
2022-04-03 15:24:24
Exploit for Server-Side Request Forgery in Apache Http Server
2024-05-19 11:04:58
cnvd
cnvd
Apache HTTP Server mod_proxy server-side request forgery vulnerability
2021-09-18 00:00:00
Apache HTTP Server ap_escape_quotes buffer overflow vulnerability
2021-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2021-39275
2021-09-16 00:00:00
CVE-2021-34798
2021-09-16 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-39275
2021-10-11 15:13:18
cve
cve
CVE-2021-39275
2021-09-16 15:15:07
cisa_kev
cisa_kev
Apache HTTP Server-Side Request Forgery (SSRF)
2021-12-01 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server Server-Side Request Forgery (CVE-2021-40438)
2021-10-18 00:00:00
zdi
zdi