Red Hat Security Advisory

RHSA-2022:5163

httpd:2.4 security update

Released 2022-06-22 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-47.module+el8.6.0+15654+427eba2e.2.aarch64::httpd:2.4, httpd-2.4.37-47.module+el8.6.0+15654+427eba2e.2.ppc64le::httpd:2.4, httpd-2.4.37-47.module+el8.6.0+15654+427eba2e.2.s390x::httpd:2.4 +38

Fixes 1 record

TI-2020-10926 CVE-2020-13950 · GHSA-pqc6-p826-c5qw

mod_proxy_http NULL pointer dereference

MEDIUM 64

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.50023 Published 2021-06-10 Partial fix CWE-476