Red Hat Security Advisory

RHSA-2022:0891

httpd:2.4 security update

Released 2022-03-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.aarch64::httpd:2.4, httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.ppc64le::httpd:2.4, httpd-2.4.37-43.module+el8.5.0+14370+51c6d843.2.s390x::httpd:2.4 +38

TI-2021-16656 CVE-2021-39275 · GHSA-p59c-pqfv-4fwc

HIGH 69

ap_escape_quotes() may write beyond the end of a buffer when given malicious input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39402 Published 2021-09-16 Partial fix CWE-787

TI-2021-13795 CVE-2021-34798 · GHSA-6cg7-x9gh-4wf6

HIGH 69

Malformed requests may cause the server to dereference a NULL pointer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.64509 Published 2021-09-16 Partial fix CWE-476