Summary
mod_http2
[1.15.7-5]
- Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
or SSRF in forward proxy configurations
[1.15.7-4]
- Resolves: #1966728 - CVE-2021-33193 httpd:2.4/mod_http2: httpd:
Request splitting via HTTP/2 method injection and mod_proxy
mod_md
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | mod_http2 | 0:1.15.7-5.module+el8.6.0+20548+01710940 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | mod_md | 1:2.0.8-8.module+el8.5.0+20475+4f6a8fd5 |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | mod_session | 0:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-47.0.1.module+el8.6.0+20649+083145da.1 |
Vulnerabilities 4
-
Unscored —CVE-2020-35452 EPSS 53%
mod_auth_digest possible stack overflow by one nul byte
Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compile…
-
Unscored —CVE-2021-33193 EPSS 46%
Request splitting via HTTP/2 method injection and mod_proxy
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
-
Unscored —CVE-2021-36160 EPSS 64%
mod_proxy_uwsgi out of bound read
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
-
Unscored —CVE-2021-44224 EPSS 82%
Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Soc…