Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mod_http2alma-upgrade-mod_md | May 4, 2022 | Jun 10, 2021 | |
| Alpine Linux | alpine-linux-upgrade-apache2 | Mar 26, 2024 | Jun 10, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-httpdamazon-linux-ami-2-upgrade-httpd-debuginfoamazon-linux-ami-2-upgrade-httpd-develamazon-linux-ami-2-upgrade-httpd-filesystemamazon-linux-ami-2-upgrade-httpd-manualamazon-linux-ami-2-upgrade-httpd-toolsamazon-linux-ami-2-upgrade-mod_ldapamazon-linux-ami-2-upgrade-mod_mdamazon-linux-ami-2-upgrade-mod_proxy_htmlamazon-linux-ami-2-upgrade-mod_sessionamazon-linux-ami-2-upgrade-mod_ssl | Jun 24, 2021 | Jun 10, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-httpd24 | Jul 13, 2021 | Jun 10, 2021 |
| Apache Httpd | apache-httpd-upgrade-latest | Dec 22, 2021 | Jun 10, 2021 | |
| Centos_linux | — | centos-upgrade-httpdcentos-upgrade-httpd-debuginfocentos-upgrade-httpd-debugsourcecentos-upgrade-httpd-develcentos-upgrade-httpd-filesystemcentos-upgrade-httpd-manualcentos-upgrade-httpd-toolscentos-upgrade-httpd-tools-debuginfocentos-upgrade-mod_http2centos-upgrade-mod_http2-debuginfocentos-upgrade-mod_http2-debugsourcecentos-upgrade-mod_ldapcentos-upgrade-mod_ldap-debuginfocentos-upgrade-mod_mdcentos-upgrade-mod_md-debuginfocentos-upgrade-mod_md-debugsourcecentos-upgrade-mod_proxy_htmlcentos-upgrade-mod_proxy_html-debuginfocentos-upgrade-mod_sessioncentos-upgrade-mod_session-debuginfocentos-upgrade-mod_sslcentos-upgrade-mod_ssl-debuginfo | Nov 10, 2021 | Jun 10, 2021 |
| Check Point Gaia | check-point-gaia-upgrade | Feb 25, 2026 | Oct 27, 2021 | |
| Debian | debian-upgrade-apache2 | Jul 12, 2021 | Jun 10, 2021 | |
| Freebsd | freebsd-upgrade-package-apache24 | Nov 4, 2022 | Jun 10, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-www-servers-apache | Jul 19, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-httpdhuawei-euleros-2_0_sp2-upgrade-httpd-develhuawei-euleros-2_0_sp2-upgrade-httpd-manualhuawei-euleros-2_0_sp2-upgrade-httpd-toolshuawei-euleros-2_0_sp2-upgrade-mod_ssl | Sep 16, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-httpdhuawei-euleros-2_0_sp3-upgrade-httpd-develhuawei-euleros-2_0_sp3-upgrade-httpd-manualhuawei-euleros-2_0_sp3-upgrade-httpd-toolshuawei-euleros-2_0_sp3-upgrade-mod_ssl | Oct 26, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-httpdhuawei-euleros-2_0_sp5-upgrade-httpd-develhuawei-euleros-2_0_sp5-upgrade-httpd-manualhuawei-euleros-2_0_sp5-upgrade-httpd-toolshuawei-euleros-2_0_sp5-upgrade-mod_sessionhuawei-euleros-2_0_sp5-upgrade-mod_ssl | Sep 7, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-httpdhuawei-euleros-2_0_sp8-upgrade-httpd-develhuawei-euleros-2_0_sp8-upgrade-httpd-filesystemhuawei-euleros-2_0_sp8-upgrade-httpd-manualhuawei-euleros-2_0_sp8-upgrade-httpd-toolshuawei-euleros-2_0_sp8-upgrade-mod_sessionhuawei-euleros-2_0_sp8-upgrade-mod_ssl | Aug 10, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-httpdhuawei-euleros-2_0_sp9-upgrade-httpd-filesystemhuawei-euleros-2_0_sp9-upgrade-httpd-toolshuawei-euleros-2_0_sp9-upgrade-mod_ssl | Sep 29, 2021 | Jun 10, 2021 | |
| Ibm Http_server | — | ibm-http_server-apply-interim-fix-ph06010-for-9_0 | Jul 2, 2021 | Jun 10, 2021 |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-server-apache-24-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dbd-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-gss-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ldap-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-lua-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-fips-140-2-4-48-11-4-35-0-1-94-3 | Oct 12, 2021 | Jun 10, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-httpdoracle-linux-upgrade-httpd-develoracle-linux-upgrade-httpd-filesystemoracle-linux-upgrade-httpd-manualoracle-linux-upgrade-httpd-toolsoracle-linux-upgrade-mod-http2oracle-linux-upgrade-mod-ldaporacle-linux-upgrade-mod-mdoracle-linux-upgrade-mod-proxy-htmloracle-linux-upgrade-mod-sessionoracle-linux-upgrade-mod-ssl | Nov 4, 2021 | Jun 4, 2021 |
| Redhat_linux | redhat-upgrade-httpdredhat-upgrade-httpd-debuginforedhat-upgrade-httpd-debugsourceredhat-upgrade-httpd-develredhat-upgrade-httpd-filesystemredhat-upgrade-httpd-manualredhat-upgrade-httpd-toolsredhat-upgrade-httpd-tools-debuginforedhat-upgrade-mod_http2redhat-upgrade-mod_http2-debuginforedhat-upgrade-mod_http2-debugsourceredhat-upgrade-mod_ldapredhat-upgrade-mod_ldap-debuginforedhat-upgrade-mod_mdredhat-upgrade-mod_md-debuginforedhat-upgrade-mod_md-debugsourceredhat-upgrade-mod_proxy_htmlredhat-upgrade-mod_proxy_html-debuginforedhat-upgrade-mod_sessionredhat-upgrade-mod_session-debuginforedhat-upgrade-mod_sslredhat-upgrade-mod_ssl-debuginfo | Nov 10, 2021 | Jun 10, 2021 | |
| Rocky_linux | rocky-upgrade-httpdrocky-upgrade-httpd-debuginforocky-upgrade-httpd-debugsourcerocky-upgrade-httpd-develrocky-upgrade-httpd-toolsrocky-upgrade-httpd-tools-debuginforocky-upgrade-mod_http2rocky-upgrade-mod_http2-debuginforocky-upgrade-mod_http2-debugsourcerocky-upgrade-mod_ldaprocky-upgrade-mod_ldap-debuginforocky-upgrade-mod_mdrocky-upgrade-mod_md-debuginforocky-upgrade-mod_md-debugsourcerocky-upgrade-mod_proxy_htmlrocky-upgrade-mod_proxy_html-debuginforocky-upgrade-mod_sessionrocky-upgrade-mod_session-debuginforocky-upgrade-mod_sslrocky-upgrade-mod_ssl-debuginfo | Mar 12, 2024 | Jun 10, 2021 | |
| Suse | — | suse-upgrade-apache2suse-upgrade-apache2-develsuse-upgrade-apache2-docsuse-upgrade-apache2-eventsuse-upgrade-apache2-example-pagessuse-upgrade-apache2-preforksuse-upgrade-apache2-utilssuse-upgrade-apache2-worker | Jun 18, 2021 | Jun 10, 2021 |
| Ubuntu | ubuntu-pro-upgrade-apache2ubuntu-pro-upgrade-apache2-binubuntu-upgrade-apache2ubuntu-upgrade-apache2-bin | Jun 21, 2021 | Jun 10, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub