Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update

Fixed packages 25

Vulnerabilities 5

• Unscored —
  CVE-2021-33193 EPSS 46%

  Request splitting via HTTP/2 method injection and mod_proxy

  A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Aug 16, 2021
• Unscored —
  CVE-2021-36160 EPSS 64%

  mod_proxy_uwsgi out of bound read

  A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Sep 16, 2021
• Unscored —
  CVE-2021-39275 EPSS 39%

  ap_escape_quotes buffer overflow

  ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Sep 16, 2021
• Unscored —
  CVE-2021-41524 EPSS 26%

  null pointer dereference in h2 fuzzing

  While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine
  Oct 5, 2021
• Unscored —
  CVE-2021-44224 EPSS 82%

  Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

  A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Soc…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Dec 20, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.51/html-single/red_hat_jboss_core_services_apache_http_server_2.4.51_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1966728
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2005119
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2005124
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2010934
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2034672
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7143.json
• report
  https://access.redhat.com/security/cve/CVE-2021-33193
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-33193
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-33193
• article
  https://portswigger.net/research/http2
• report
  https://access.redhat.com/security/cve/CVE-2021-36160
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-36160
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-36160
• report
  https://access.redhat.com/security/cve/CVE-2021-39275
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-39275
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-39275
• report
  https://access.redhat.com/security/cve/CVE-2021-41524
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-41524
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-41524
• article
  https://httpd.apache.org/security/vulnerabilities_24.html
• report
  https://access.redhat.com/security/cve/CVE-2021-44224
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-44224
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-44224
• article
  http://httpd.apache.org/security/vulnerabilities_24.html