Red Hat Security Advisory

RHSA-2021:3836

httpd:2.4 security update

Released 2021-10-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 8.2) httpd-2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aarch64::httpd:2.4, httpd-2.4.37-21.module+el8.2.0+12904+53ee7aba.1.ppc64le::httpd:2.4, httpd-2.4.37-21.module+el8.2.0+12904+53ee7aba.1.s390x::httpd:2.4 +38

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918