Skip to content
OpenAdvisories
Unscored RHSA-2022:0303 1 CVE

Red Hat Security Advisory: httpd24-httpd security update

Published Sep 13, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-httpd 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-httpd-debuginfo 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-httpd-devel 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-httpd-manual 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-httpd-tools 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-mod_ldap 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-mod_proxy_html 1:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-mod_session 0:2.4.34-23.el7.1
Red Hat · RHEL 3 rhel_software_collections:3::el7 httpd24-mod_ssl 1:2.4.34-23.el7.1

Vulnerabilities 1

  • Unscored —
    CVE-2021-44790 Public exploit EPSS 97%

    Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

    A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue af…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2034674
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0303.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-44790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-44790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-44790
  • article
    http://httpd.apache.org/security/vulnerabilities_24.html