Skip to content
OpenAdvisories
Unscored RHSA-2022:0288 1 CVE

Red Hat Security Advisory: httpd:2.4 security update

Published Sep 13, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-debuginfo 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-debugsource 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-devel 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-filesystem 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-manual 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-tools 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream httpd-tools-debuginfo 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_http2 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_http2-debuginfo 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_http2-debugsource 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_ldap 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_ldap-debuginfo 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_md 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_md-debuginfo 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_proxy_html 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_proxy_html-debuginfo 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_session 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_session-debuginfo 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_ssl 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
Red Hat · RHEL 8.1 E4S rhel_e4s:8.1::appstream mod_ssl-debuginfo 1:2.4.37-16.module+el8.1.0+13809+822d170a.3

Vulnerabilities 1

  • Unscored —
    CVE-2021-44790 Public exploit EPSS 97%

    Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

    A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue af…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2034674
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0288.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-44790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-44790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-44790
  • article
    http://httpd.apache.org/security/vulnerabilities_24.html