Red Hat Security Advisory

RHSA-2022:0288

httpd:2.4 security update

Released 2022-01-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v. 8.1) httpd-2.4.37-16.module+el8.1.0+13809+822d170a.3.ppc64le::httpd:2.4, httpd-2.4.37-16.module+el8.1.0+13809+822d170a.3.src::httpd:2.4, httpd-2.4.37-16.module+el8.1.0+13809+822d170a.3.x86_64::httpd:2.4 +19

TI-2021-20274 CVE-2021-44790 · GHSA-c547-2659-q37g

CRITICAL 86

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9684 Published 2021-12-20 Partial fix CWE-787