Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.0
Red Hat httpd may let attackers run their own code
published 2 years ago
Summary
The Apache web server packages from Red Hat (httpd and its related tools) have a flaw that could let a remote attacker execute their own programs on the server. This could lead to loss of control of the web server and possible exposure of the data it hosts. Install the latest Red Hat update for these packages as soon as possible and restart the web service.
What to do
- Update redhat httpd to version 0:2.4.6-97.el7_9.1.
- Update redhat httpd-debuginfo to version 0:2.4.6-97.el7_9.1.
- Update redhat httpd-devel to version 0:2.4.6-97.el7_9.1.
- Update redhat httpd-manual to version 0:2.4.6-97.el7_9.1.
- Update redhat httpd-tools to version 0:2.4.6-97.el7_9.1.
- Update redhat mod_ldap to version 0:2.4.6-97.el7_9.1.
- Update redhat mod_proxy_html to version 1:2.4.6-97.el7_9.1.
- Update redhat mod_session to version 0:2.4.6-97.el7_9.1.
- Update redhat mod_ssl to version 1:2.4.6-97.el7_9.1.
- Update redhat httpd to version 0:2.4.6-40.el7_2.7.
- Update redhat httpd-debuginfo to version 0:2.4.6-40.el7_2.7.
- Update redhat httpd-devel to version 0:2.4.6-40.el7_2.7.
- Update redhat httpd-manual to version 0:2.4.6-40.el7_2.7.
- Update redhat httpd-tools to version 0:2.4.6-40.el7_2.7.
- Update redhat mod_ssl to version 1:2.4.6-40.el7_2.7.
- Update redhat httpd to version 0:2.4.6-45.el7_3.6.
- Update redhat httpd-debuginfo to version 0:2.4.6-45.el7_3.6.
- Update redhat httpd-devel to version 0:2.4.6-45.el7_3.6.
- Update redhat httpd-manual to version 0:2.4.6-45.el7_3.6.
- Update redhat httpd-tools to version 0:2.4.6-45.el7_3.6.
- Update redhat mod_ssl to version 1:2.4.6-45.el7_3.6.
- Update redhat httpd to version 0:2.4.6-67.el7_4.7.
- Update redhat httpd-debuginfo to version 0:2.4.6-67.el7_4.7.
- Update redhat httpd-devel to version 0:2.4.6-67.el7_4.7.
- Update redhat httpd-manual to version 0:2.4.6-67.el7_4.7.
- Update redhat httpd-tools to version 0:2.4.6-67.el7_4.7.
- Update redhat mod_session to version 0:2.4.6-67.el7_4.7.
- Update redhat mod_ssl to version 1:2.4.6-67.el7_4.7.
- Update redhat httpd to version 0:2.4.6-89.el7_6.2.
- Update redhat httpd-debuginfo to version 0:2.4.6-89.el7_6.2.
- Update redhat httpd-devel to version 0:2.4.6-89.el7_6.2.
- Update redhat httpd-manual to version 0:2.4.6-89.el7_6.2.
- Update redhat httpd-tools to version 0:2.4.6-89.el7_6.2.
- Update redhat mod_session to version 0:2.4.6-89.el7_6.2.
- Update redhat mod_ssl to version 1:2.4.6-89.el7_6.2.
- Update redhat httpd to version 0:2.4.6-90.el7_7.1.
- Update redhat httpd-debuginfo to version 0:2.4.6-90.el7_7.1.
- Update redhat httpd-devel to version 0:2.4.6-90.el7_7.1.
- Update redhat httpd-manual to version 0:2.4.6-90.el7_7.1.
- Update redhat httpd-tools to version 0:2.4.6-90.el7_7.1.
- Update redhat mod_session to version 0:2.4.6-90.el7_7.1.
- Update redhat mod_ssl to version 1:2.4.6-90.el7_7.1.
- Update redhat mod_ldap to version 0:2.4.6-40.el7_2.7.
- Update redhat mod_proxy_html to version 1:2.4.6-40.el7_2.7.
- Update redhat mod_session to version 0:2.4.6-40.el7_2.7.
- Update redhat mod_ldap to version 0:2.4.6-45.el7_3.6.
- Update redhat mod_proxy_html to version 1:2.4.6-45.el7_3.6.
- Update redhat mod_session to version 0:2.4.6-45.el7_3.6.
- Update redhat mod_ldap to version 0:2.4.6-67.el7_4.7.
- Update redhat mod_proxy_html to version 1:2.4.6-67.el7_4.7.
- Update redhat mod_ldap to version 0:2.4.6-89.el7_6.2.
- Update redhat mod_proxy_html to version 1:2.4.6-89.el7_6.2.
- Update redhat mod_ldap to version 0:2.4.6-90.el7_7.1.
- Update redhat mod_proxy_html to version 1:2.4.6-90.el7_7.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:7::client | redhat | httpd |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | httpd-debuginfo |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | httpd-devel |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | httpd-manual |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | httpd-tools |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | mod_ldap |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | mod_proxy_html |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | mod_session |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::client | redhat | mod_ssl |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | httpd |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | httpd-debuginfo |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | httpd-devel |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | httpd-manual |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | httpd-tools |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | mod_ldap |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | mod_proxy_html |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | mod_session |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::computenode | redhat | mod_ssl |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:rhel_aus:7.2::server | redhat | httpd |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | httpd-debuginfo |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | httpd-devel |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | httpd-manual |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | httpd-tools |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | mod_ssl |
< 1:2.4.6-40.el7_2.7 Fix: upgrade to 1:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.3::server | redhat | httpd |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | httpd-debuginfo |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | httpd-devel |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | httpd-manual |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | httpd-tools |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | mod_ssl |
< 1:2.4.6-45.el7_3.6 Fix: upgrade to 1:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.4::server | redhat | httpd |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | httpd-debuginfo |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | httpd-devel |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | httpd-manual |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | httpd-tools |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | mod_session |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | mod_ssl |
< 1:2.4.6-67.el7_4.7 Fix: upgrade to 1:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.6::server | redhat | httpd |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | httpd-debuginfo |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | httpd-devel |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | httpd-manual |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | httpd-tools |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | mod_session |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | mod_ssl |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | httpd |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | httpd-debuginfo |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | httpd-devel |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | httpd-manual |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | httpd-tools |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | mod_session |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
Showing 50 of 117. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:7.6::server | redhat | mod_ssl |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | httpd |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | httpd-debuginfo |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | httpd-devel |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | httpd-manual |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | httpd-tools |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | mod_session |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | mod_ssl |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.7::server | redhat | httpd |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | httpd-debuginfo |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | httpd-devel |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | httpd-manual |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | httpd-tools |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | mod_session |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | mod_ssl |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | httpd |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | httpd-debuginfo |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | httpd-devel |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | httpd-manual |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | httpd-tools |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | mod_session |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | mod_ssl |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | httpd |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | httpd-debuginfo |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | httpd-devel |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | httpd-manual |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | httpd-tools |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | mod_session |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | mod_ssl |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:enterprise_linux:7::server | redhat | httpd |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | httpd-debuginfo |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | httpd-devel |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | httpd-manual |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | httpd-tools |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | mod_session |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | mod_ssl |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:rhel_aus:7.2::server | redhat | mod_ldap |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | mod_proxy_html |
< 1:2.4.6-40.el7_2.7 Fix: upgrade to 1:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.2::server | redhat | mod_session |
< 0:2.4.6-40.el7_2.7 Fix: upgrade to 0:2.4.6-40.el7_2.7
|
| Red Hat:rhel_aus:7.3::server | redhat | mod_ldap |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | mod_proxy_html |
< 1:2.4.6-45.el7_3.6 Fix: upgrade to 1:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.3::server | redhat | mod_session |
< 0:2.4.6-45.el7_3.6 Fix: upgrade to 0:2.4.6-45.el7_3.6
|
| Red Hat:rhel_aus:7.4::server | redhat | mod_ldap |
< 0:2.4.6-67.el7_4.7 Fix: upgrade to 0:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.4::server | redhat | mod_proxy_html |
< 1:2.4.6-67.el7_4.7 Fix: upgrade to 1:2.4.6-67.el7_4.7
|
| Red Hat:rhel_aus:7.6::server | redhat | mod_ldap |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.6::server | redhat | mod_proxy_html |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | mod_ldap |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_e4s:7.6::server | redhat | mod_proxy_html |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | mod_ldap |
< 0:2.4.6-89.el7_6.2 Fix: upgrade to 0:2.4.6-89.el7_6.2
|
| Red Hat:rhel_tus:7.6::server | redhat | mod_proxy_html |
< 1:2.4.6-89.el7_6.2 Fix: upgrade to 1:2.4.6-89.el7_6.2
|
| Red Hat:rhel_aus:7.7::server | redhat | mod_ldap |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_aus:7.7::server | redhat | mod_proxy_html |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | mod_ldap |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_e4s:7.7::server | redhat | mod_proxy_html |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | mod_ldap |
< 0:2.4.6-90.el7_7.1 Fix: upgrade to 0:2.4.6-90.el7_7.1
|
| Red Hat:rhel_tus:7.7::server | redhat | mod_proxy_html |
< 1:2.4.6-90.el7_7.1 Fix: upgrade to 1:2.4.6-90.el7_7.1
|
| Red Hat:enterprise_linux:7::server | redhat | mod_ldap |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::server | redhat | mod_proxy_html |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | httpd |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | httpd-debuginfo |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | httpd-devel |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | httpd-manual |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | httpd-tools |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | mod_session |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | mod_ssl |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | mod_ldap |
< 0:2.4.6-97.el7_9.1 Fix: upgrade to 0:2.4.6-97.el7_9.1
|
| Red Hat:enterprise_linux:7::workstation | redhat | mod_proxy_html |
< 1:2.4.6-97.el7_9.1 Fix: upgrade to 1:2.4.6-97.el7_9.1
|
Original advisory text
Red Hat Security Advisory: httpd security update
References
- https://access.redhat.com/errata/RHSA-2021:3856 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2005117 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3856.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2021-40438 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2021-40438 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-40438 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published13 Sep 2024
Updated23 Sep 2026
First seen23 Sep 2026
Sources
RHSA-2021:3856 · OSV
Track software like this
Free during beta