Skip to content
OpenAdvisories
Unscored RHSA-2022:0258 1 CVE

Red Hat Security Advisory: httpd:2.4 security update

Published Sep 13, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 66

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-debuginfo 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-debugsource 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-devel 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-filesystem 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-manual 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-tools 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream httpd-tools-debuginfo 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_http2 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_http2-debuginfo 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_http2-debugsource 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_ldap 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_ldap-debuginfo 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_md 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_md-debuginfo 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_md-debugsource 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_proxy_html 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_proxy_html-debuginfo 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_session 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_session-debuginfo 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_ssl 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_ssl-debuginfo 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-debuginfo 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-debugsource 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-devel 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-filesystem 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-manual 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-tools 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream httpd-tools-debuginfo 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_http2 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_http2-debuginfo 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_http2-debugsource 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_ldap 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_ldap-debuginfo 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_md 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_md-debuginfo 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_md-debugsource 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_proxy_html 1:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_proxy_html-debuginfo 1:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_session 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_session-debuginfo 0:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_ssl 1:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.2 EUS rhel_eus:8.2::appstream mod_ssl-debuginfo 1:2.4.37-21.module+el8.2.0+13808+dea277df.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-debuginfo 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-debugsource 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-devel 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-filesystem 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-manual 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-tools 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream httpd-tools-debuginfo 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_http2 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_http2-debuginfo 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_http2-debugsource 0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_ldap 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_ldap-debuginfo 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_md 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_md-debuginfo 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_md-debugsource 1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_proxy_html 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_proxy_html-debuginfo 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_session 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_session-debuginfo 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_ssl 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3
Red Hat · RHEL 8.4 EUS rhel_eus:8.4::appstream mod_ssl-debuginfo 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3

Vulnerabilities 1

  • Unscored —
    CVE-2021-44790 Public exploit EPSS 97%

    Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

    A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue af…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2034674
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0258.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-44790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-44790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-44790
  • article
    http://httpd.apache.org/security/vulnerabilities_24.html