In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-mod_http2alma-upgrade-mod_md | May 4, 2022 | Jun 10, 2021 | |
| Alpine Linux | alpine-linux-upgrade-apache2 | Mar 26, 2024 | Jun 10, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-httpdamazon-linux-ami-2-upgrade-httpd-debuginfoamazon-linux-ami-2-upgrade-httpd-develamazon-linux-ami-2-upgrade-httpd-filesystemamazon-linux-ami-2-upgrade-httpd-manualamazon-linux-ami-2-upgrade-httpd-toolsamazon-linux-ami-2-upgrade-mod_ldapamazon-linux-ami-2-upgrade-mod_mdamazon-linux-ami-2-upgrade-mod_proxy_htmlamazon-linux-ami-2-upgrade-mod_sessionamazon-linux-ami-2-upgrade-mod_ssl | Jun 24, 2021 | Jun 10, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-httpd24 | Jul 13, 2021 | Jun 10, 2021 |
| Apache Httpd | apache-httpd-upgrade-latest | Dec 22, 2021 | Jun 10, 2021 | |
| Centos_linux | — | centos-upgrade-httpdcentos-upgrade-httpd-debuginfocentos-upgrade-httpd-debugsourcecentos-upgrade-httpd-develcentos-upgrade-httpd-filesystemcentos-upgrade-httpd-manualcentos-upgrade-httpd-toolscentos-upgrade-httpd-tools-debuginfocentos-upgrade-mod_http2centos-upgrade-mod_http2-debuginfocentos-upgrade-mod_http2-debugsourcecentos-upgrade-mod_ldapcentos-upgrade-mod_ldap-debuginfocentos-upgrade-mod_mdcentos-upgrade-mod_md-debuginfocentos-upgrade-mod_md-debugsourcecentos-upgrade-mod_proxy_htmlcentos-upgrade-mod_proxy_html-debuginfocentos-upgrade-mod_sessioncentos-upgrade-mod_session-debuginfocentos-upgrade-mod_sslcentos-upgrade-mod_ssl-debuginfo | Oct 14, 2021 | Jun 10, 2021 |
| Check Point Gaia | check-point-gaia-upgrade | Feb 25, 2026 | Oct 27, 2021 | |
| Debian | debian-upgrade-apache2 | Jul 12, 2021 | Jun 10, 2021 | |
| Freebsd | freebsd-upgrade-package-apache24 | Nov 4, 2022 | Jun 10, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-www-servers-apache | Jul 19, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-httpdhuawei-euleros-2_0_sp2-upgrade-httpd-develhuawei-euleros-2_0_sp2-upgrade-httpd-manualhuawei-euleros-2_0_sp2-upgrade-httpd-toolshuawei-euleros-2_0_sp2-upgrade-mod_ssl | Sep 16, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-httpdhuawei-euleros-2_0_sp3-upgrade-httpd-develhuawei-euleros-2_0_sp3-upgrade-httpd-manualhuawei-euleros-2_0_sp3-upgrade-httpd-toolshuawei-euleros-2_0_sp3-upgrade-mod_ssl | Oct 26, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-httpdhuawei-euleros-2_0_sp5-upgrade-httpd-develhuawei-euleros-2_0_sp5-upgrade-httpd-manualhuawei-euleros-2_0_sp5-upgrade-httpd-toolshuawei-euleros-2_0_sp5-upgrade-mod_sessionhuawei-euleros-2_0_sp5-upgrade-mod_ssl | Sep 29, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-httpdhuawei-euleros-2_0_sp8-upgrade-httpd-develhuawei-euleros-2_0_sp8-upgrade-httpd-filesystemhuawei-euleros-2_0_sp8-upgrade-httpd-manualhuawei-euleros-2_0_sp8-upgrade-httpd-toolshuawei-euleros-2_0_sp8-upgrade-mod_sessionhuawei-euleros-2_0_sp8-upgrade-mod_ssl | Sep 24, 2021 | Jun 10, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-httpdhuawei-euleros-2_0_sp9-upgrade-httpd-filesystemhuawei-euleros-2_0_sp9-upgrade-httpd-toolshuawei-euleros-2_0_sp9-upgrade-mod_ssl | Sep 29, 2021 | Jun 10, 2021 | |
| Ibm Http_server | — | ibm-http_server-apply-interim-fix-ph06010-for-9_0 | Jul 2, 2021 | Jun 10, 2021 |
| Oracle Solaris | oracle-solaris-11-4-upgrade-web-server-apache-24-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-dbd-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-gss-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ldap-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-lua-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-2-4-48-11-4-35-0-1-94-3oracle-solaris-11-4-upgrade-web-server-apache-24-module-apache-ssl-fips-140-2-4-48-11-4-35-0-1-94-3 | Oct 12, 2021 | Jun 10, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-httpdoracle-linux-upgrade-httpd-develoracle-linux-upgrade-httpd-filesystemoracle-linux-upgrade-httpd-manualoracle-linux-upgrade-httpd-toolsoracle-linux-upgrade-mod-http2oracle-linux-upgrade-mod-ldaporacle-linux-upgrade-mod-mdoracle-linux-upgrade-mod-proxy-htmloracle-linux-upgrade-mod-sessionoracle-linux-upgrade-mod-ssl | Oct 14, 2021 | Jun 4, 2021 |
| Redhat_linux | redhat-upgrade-httpdredhat-upgrade-httpd-debuginforedhat-upgrade-httpd-debugsourceredhat-upgrade-httpd-develredhat-upgrade-httpd-filesystemredhat-upgrade-httpd-manualredhat-upgrade-httpd-toolsredhat-upgrade-httpd-tools-debuginforedhat-upgrade-mod_http2redhat-upgrade-mod_http2-debuginforedhat-upgrade-mod_http2-debugsourceredhat-upgrade-mod_ldapredhat-upgrade-mod_ldap-debuginforedhat-upgrade-mod_mdredhat-upgrade-mod_md-debuginforedhat-upgrade-mod_md-debugsourceredhat-upgrade-mod_proxy_htmlredhat-upgrade-mod_proxy_html-debuginforedhat-upgrade-mod_sessionredhat-upgrade-mod_session-debuginforedhat-upgrade-mod_sslredhat-upgrade-mod_ssl-debuginfo | Oct 14, 2021 | Jun 10, 2021 | |
| Rocky_linux | rocky-upgrade-httpdrocky-upgrade-httpd-debuginforocky-upgrade-httpd-debugsourcerocky-upgrade-httpd-develrocky-upgrade-httpd-toolsrocky-upgrade-httpd-tools-debuginforocky-upgrade-mod_http2rocky-upgrade-mod_http2-debuginforocky-upgrade-mod_http2-debugsourcerocky-upgrade-mod_ldaprocky-upgrade-mod_ldap-debuginforocky-upgrade-mod_mdrocky-upgrade-mod_md-debuginforocky-upgrade-mod_md-debugsourcerocky-upgrade-mod_proxy_htmlrocky-upgrade-mod_proxy_html-debuginforocky-upgrade-mod_sessionrocky-upgrade-mod_session-debuginforocky-upgrade-mod_sslrocky-upgrade-mod_ssl-debuginfo | Mar 12, 2024 | Jun 10, 2021 | |
| Suse | — | suse-upgrade-apache2suse-upgrade-apache2-develsuse-upgrade-apache2-docsuse-upgrade-apache2-eventsuse-upgrade-apache2-example-pagessuse-upgrade-apache2-preforksuse-upgrade-apache2-utilssuse-upgrade-apache2-worker | Jun 18, 2021 | Jun 10, 2021 |
| Ubuntu | ubuntu-pro-upgrade-apache2ubuntu-pro-upgrade-apache2-binubuntu-upgrade-apache2ubuntu-upgrade-apache2-bin | Jun 21, 2021 | Jun 10, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 10, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub