Every CVE Search/ Get API key

CVE-2021-39275

ap_escape_quotes buffer overflow

9.8 CriticalFix available

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

39.4%Up 39.0 points since Sep 17, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

ap_escape_quotes buffer overflow

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
CVE-2021-39275
Updated
2026-11-02
EUVDEUVD-2021-25637 No score

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
EUVD-2021-25637
Updated
2026-11-03
GitHub AdvisoriesGHSA-p59c-pqfv-4fwc 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included...

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
GHSA-p59c-pqfv-4fwc
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-120, CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2021-39275 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
ALPINE-CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-6486 9.8

CVE-2021-39275 affecting package httpd for versions less than 2.4.52-1

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
AZL-6486
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 26 moreShow less
OSVBELL-CVE-2021-39275 9.8

CVE-2021-39275 does not affect BellSoft software

Record
BELL-CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-39275 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
DEBIAN-CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1387 7.5

httpd security update

Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.

Security Fix(es):

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-39275)

Record
OESA-2021-1387
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:0143 9.8

Red Hat Security Advisory: httpd security update

Record
RHSA-2022:0143
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:0891 8.1

Red Hat Security Advisory: httpd:2.4 security update

Record
RHSA-2022:0891
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:6753 8.1

Red Hat Security Advisory: httpd24-httpd security and bug fix update

Record
RHSA-2022:6753
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:7143 8.1

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update

Record
RHSA-2022:7143
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2022:0891 8.1

Moderate: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)

  • httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:0891
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-39275 9.8

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
UBUNTU-CVE-2021-39275
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2022:0891 No score

Moderate: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)

  • httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:0891
Updated
2026-11-02
OSVBIT-apache-2021-39275 No score

ap_escape_quotes buffer overflow

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Record
BIT-apache-2021-39275
Updated
2026-11-02
OSVCLSA-2021-1634745216 No score

Fix of CVE: CVE-2021-39275

  • CVE-2021-39275: ap_escape_quotes() algorithm which led to buffer overflow.
Record
CLSA-2021-1634745216
Updated
2026-11-02
OSVCLSA-2021-1634922666 No score

Fixed CVE-2021-39275 in httpd

  • CVE-2021-39275: ap_escape_quotes() algorithm which led to buffer overflow.
Record
CLSA-2021-1634922666
Updated
2026-11-02
OSVCLSA-2021-1635458969 No score

Fix CVE(s): CVE-2021-40438, CVE-2021-34798, CVE-2021-39275

  • SECURITY UPDATE: Buffer overflow with crafted input
    • debian/patches/CVE-2021-39275.patch:ap_escape_quotes() may write beyond the end of a buffer when given malicious input
    • CVE-2021-39275
  • SECURITY UPDATE: Malformed requests may cause the server to dereference a NULL pointer
    • debian/patches/CVE-2021-34798.patch: prevent ap_increment_counts() from pointer dereference without check
    • CVE-2021-34798
  • SECURITY UPDATE: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.
    • debian/patches/CVE-2021-40438.patch: add checks for the configured UDS path
    • CVE-2021-40438
Record
CLSA-2021-1635458969
Updated
2026-11-02
OSVCLSA-2022-1644869383 No score

Fix of CVE: CVE-2021-39275, CVE-2021-36160, CVE-2021-34798, CVE-2021-44224

  • CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations
  • CVE-2021-39275: out-of-bounds write in ap_escape_quotes() via malicious input
  • CVE-2021-36160: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path
  • CVE-2021-34798: NULL pointer dereference via malformed requests
Record
CLSA-2022-1644869383
Updated
2026-11-02
OSVCLSA-2022-1644869841 No score

Fix of CVE: CVE-2021-34798, CVE-2021-39275, CVE-2021-36160, CVE-2021-44224

  • CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations
  • CVE-2021-39275: out-of-bounds write in ap_escape_quotes() via malicious input
  • CVE-2021-36160: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path
  • CVE-2021-34798: NULL pointer dereference via malformed requests
Record
CLSA-2022-1644869841
Updated
2026-11-02
OSVMGASA-2021-0439 No score

Updated apache packages fix security vulnerability

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. (CVE-2021-33193)

Malformed requests may cause the server to dereference a NULL pointer. (CVE-2021-34798)

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). (CVE-2021-36160)

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. (CVE-2021-39275)

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. (CVE-2021-40438)

Record
MGASA-2021-0439
Updated
2026-11-02
OSVopenSUSE-SU-2021:1438-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
  • CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
  • CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2021:1438-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3522-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
  • CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
  • CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
Record
openSUSE-SU-2021:3522-1
Updated
2026-11-02
OSVSUSE-SU-2021:14811-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
Record
SUSE-SU-2021:14811-1
Updated
2026-11-02
OSVSUSE-SU-2021:3299-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
  • CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
Record
SUSE-SU-2021:3299-1
Updated
2026-11-02
OSVSUSE-SU-2021:3335-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
  • CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
  • CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
  • CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)
Record
SUSE-SU-2021:3335-1
Updated
2026-11-02
OSVSUSE-SU-2021:3522-1 No score

Security update for apache2

This update for apache2 fixes the following issues:

  • CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)
  • CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)
  • CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)
  • CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)
Record
SUSE-SU-2021:3522-1
Updated
2026-11-02
OSVUSN-5090-1 No score

apache2 vulnerabilities

James Kettle discovered that the Apache HTTP Server HTTP/2 module incorrectly handled certain crafted methods. A remote attacker could possibly use this issue to perform request splitting or cache poisoning attacks. (CVE-2021-33193)

It was discovered that the Apache HTTP Server incorrectly handled certain malformed requests. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. (CVE-2021-34798)

Li Zhi Xin discovered that the Apache mod_proxy_uwsgi module incorrectly handled certain request uri-paths. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 21.04. (CVE-2021-36160)

It was discovered that the Apache HTTP Server incorrectly handled escaping quotes. If the server was configured with third-party modules, a remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-39275)

It was discovered that the Apache mod_proxy module incorrectly handled certain request uri-paths. A remote attacker could possibly use this issue to cause the server to forward requests to arbitrary origin servers. (CVE-2021-40438)

Record
USN-5090-1
Updated
2026-11-02
OSVUSN-5090-2 No score

apache2 vulnerabilities

USN-5090-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that the Apache HTTP Server incorrectly handled certain malformed requests. A remote attacker could possibly use this issue to cause the server to crash, resulting in a denial of service. (CVE-2021-34798)

It was discovered that the Apache HTTP Server incorrectly handled escaping quotes. If the server was configured with third-party modules, a remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-39275)

It was discovered that the Apache mod_proxy module incorrectly handled certain request uri-paths. A remote attacker could possibly use this issue to cause the server to forward requests to arbitrary origin servers. (CVE-2021-40438)

Record
USN-5090-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
apache2
Alpine:v3.11
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.12
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.13
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.14
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.15
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.16
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.17
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.18
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.19
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.20
 before 2.4.49-r0
2.4.49-r0
Show 199 moreShow less
Affected packages
PackageAffectedFixed
apache2
Alpine:v3.21
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.22
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.23
 before 2.4.49-r0
2.4.49-r0
apache2
Alpine:v3.24
 before 2.4.49-r0
2.4.49-r0
httpd
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
httpd-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
httpd-filesystem
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
httpd-manual
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
httpd-tools
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
mod_ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
mod_md
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
mod_proxy_html
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
1:2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
mod_session
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
mod_ssl
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
1:2.4.37-43.module_el8.5.0+2630+51c6d843.2.alma
httpd
Azure Linux:2
 before 2.4.52-1
2.4.52-1
apache
Bitnami
 before 2.4.49
2.4.49
httpd
TuxCare:CentOS:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-devel
TuxCare:CentOS:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-manual
TuxCare:CentOS:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-tools
TuxCare:CentOS:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
mod_ssl
TuxCare:CentOS:6
 before 1:2.2.15-72.el6.cloudlinux.els
1:2.2.15-72.el6.cloudlinux.els
httpd
TuxCare:OracleLinux:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-devel
TuxCare:OracleLinux:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-manual
TuxCare:OracleLinux:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
httpd-tools
TuxCare:OracleLinux:6
 before 2.2.15-72.el6.cloudlinux.els
2.2.15-72.el6.cloudlinux.els
mod_ssl
TuxCare:OracleLinux:6
 before 1:2.2.15-72.el6.cloudlinux.els
1:2.2.15-72.el6.cloudlinux.els
apache2
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-bin
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-data
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-doc
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-suexec-custom
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-suexec-pristine
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
apache2-utils
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.19
2.4.18-2ubuntu3.19
httpd
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
httpd-devel
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
httpd-filesystem
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
httpd-manual
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
httpd-tools
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
mod_ldap
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
mod_proxy_html
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
mod_session
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
mod_ssl
TuxCare:CentOS:8.5
From an advisory covering 4 CVEs
 before 1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2
httpd
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
httpd-devel
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
httpd-filesystem
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
httpd-manual
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
httpd-tools
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
mod_ldap
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
mod_proxy_html
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
mod_session
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
mod_ssl
TuxCare:CentOS:8.4
From an advisory covering 4 CVEs
 before 1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3
apache2
Debian:12
 before 2.4.49-1
2.4.49-1
apache2
Debian:13
 before 2.4.49-1
2.4.49-1
apache2
Debian:14
 before 2.4.49-1
2.4.49-1
apache2
Debian:9
From an advisory covering 3 CVEs
 before 2.4.25-3+deb9u11, plus listed versions
2.4.25-32.4.25-3+deb9u12.4.25-3+deb9u102.4.25-3+deb9u22.4.25-3+deb9u3
Show 6 moreShow less
2.4.25-3+deb9u42.4.25-3+deb9u52.4.25-3+deb9u62.4.25-3+deb9u72.4.25-3+deb9u82.4.25-3+deb9u9
2.4.25-3+deb9u11
apache2
Debian:10
From an advisory covering 4 CVEs
 before 2.4.38-3+deb10u6, plus listed versions
2.4.38-32.4.38-3+deb10u12.4.38-3+deb10u22.4.38-3+deb10u32.4.38-3+deb10u42.4.38-3+deb10u5
2.4.38-3+deb10u6
apache2
Debian:11
From an advisory covering 4 CVEs
 before 2.4.51-1~deb11u1, plus listed versions
2.4.48-3.12.4.48-3.1+deb11u12.4.48-42.4.49-12.4.49-1~bpo10+1
Show 10 moreShow less
2.4.49-1~deb11u12.4.49-1~deb11u22.4.49-1~deb11u32.4.49-22.4.49-32.4.49-42.4.50-12.4.50-1~deb11u12.4.51-1~bpo10+12.4.51-1~bpo10+2
2.4.51-1~deb11u1
apache
Mageia:8
From an advisory covering 5 CVEs
 before 2.4.49-1.mga8
2.4.49-1.mga8
httpd
openEuler:20.03-LTS-SP1
 before 2.4.43-10.oe1
2.4.43-10.oe1
httpd
openEuler:20.03-LTS-SP2
 before 2.4.43-10.oe1
2.4.43-10.oe1
httpd
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-manual
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-tools
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ldap
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_proxy_html
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
mod_session
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ssl
Red Hat:enterprise_linux:7::client
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
httpd
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-manual
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-tools
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ldap
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_proxy_html
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
mod_session
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ssl
Red Hat:enterprise_linux:7::computenode
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
httpd
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-manual
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-tools
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_session
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ssl
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
mod_ldap
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_proxy_html
Red Hat:enterprise_linux:7::server
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
httpd
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-manual
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
httpd-tools
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_session
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_ssl
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
mod_ldap
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 0:2.4.6-97.el7_9.4
0:2.4.6-97.el7_9.4
mod_proxy_html
Red Hat:enterprise_linux:7::workstation
From an advisory covering 4 CVEs
 before 1:2.4.6-97.el7_9.4
1:2.4.6-97.el7_9.4
httpd
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-filesystem
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-manual
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-tools
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_http2
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.15.7-3.module+el8.4.0+8625+d397f3da
0:1.15.7-3.module+el8.4.0+8625+d397f3da
mod_http2-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.15.7-3.module+el8.4.0+8625+d397f3da
0:1.15.7-3.module+el8.4.0+8625+d397f3da
mod_http2-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.15.7-3.module+el8.4.0+8625+d397f3da
0:1.15.7-3.module+el8.4.0+8625+d397f3da
mod_ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_md
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module+el8.3.0+6814+67d1e611
1:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_md-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module+el8.3.0+6814+67d1e611
1:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_md-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module+el8.3.0+6814+67d1e611
1:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_proxy_html
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_proxy_html-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_session
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_session-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
0:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_ssl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
mod_ssl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
1:2.4.37-43.module+el8.5.0+14370+51c6d843.2
httpd24-httpd
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-httpd-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-httpd-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-httpd-manual
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-httpd-tools
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-mod_ldap
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-mod_proxy_html
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 1:2.4.34-23.el7.5
1:2.4.34-23.el7.5
httpd24-mod_session
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 0:2.4.34-23.el7.5
0:2.4.34-23.el7.5
httpd24-mod_ssl
Red Hat:rhel_software_collections:3::el7
From an advisory covering 15 CVEs
 before 1:2.4.34-23.el7.5
1:2.4.34-23.el7.5
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el7jbcs
1:2.4.51-28.el7jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el7jbcs
0:2.4.51-28.el7jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el7
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el7jbcs
1:2.4.51-28.el7jbcs
jbcs-httpd24-httpd
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-devel
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-manual
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-selinux
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-tools
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-httpd-tools-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-mod_ldap
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-mod_ldap-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-mod_proxy_html
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el8jbcs
1:2.4.51-28.el8jbcs
jbcs-httpd24-mod_proxy_html-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el8jbcs
1:2.4.51-28.el8jbcs
jbcs-httpd24-mod_session
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-mod_session-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 0:2.4.51-28.el8jbcs
0:2.4.51-28.el8jbcs
jbcs-httpd24-mod_ssl
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el8jbcs
1:2.4.51-28.el8jbcs
jbcs-httpd24-mod_ssl-debuginfo
Red Hat:jboss_core_services:1::el8
From an advisory covering 5 CVEs
 before 1:2.4.51-28.el8jbcs
1:2.4.51-28.el8jbcs
httpd
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:2.4.37-43.module+el8.5.0+714+5ec56ee8
0:2.4.37-43.module+el8.5.0+714+5ec56ee8
mod_http2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.15.7-3.module+el8.4.0+553+7a69454b
0:1.15.7-3.module+el8.4.0+553+7a69454b
mod_http2
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.15.7-3.module+el8.5.0+695+1fa8055e
0:1.15.7-3.module+el8.5.0+695+1fa8055e
mod_md
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module+el8.5.0+695+1fa8055e
1:2.0.8-8.module+el8.5.0+695+1fa8055e
mod_md
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:2.0.8-8.module+el8.4.0+553+7a69454b
1:2.0.8-8.module+el8.4.0+553+7a69454b
apache2
SUSE:Linux Enterprise Point of Sale 11 SP3
 before 2.2.34-70.38.1
2.2.34-70.38.1
apache2
SUSE:Linux Enterprise Server 11 SP4-LTSS
 before 2.2.34-70.38.1
2.2.34-70.38.1
apache2
SUSE:HPE Helion OpenStack 8
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:OpenStack Cloud 8
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 2.4.23-29.80.1
2.4.23-29.80.1
apache2
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Enterprise Storage 6
From an advisory covering 5 CVEs
 before 2.4.33-3.55.1
2.4.33-3.55.1
apache2
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1
apache2
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1
apache2
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1
apache2
SUSE:Linux Enterprise Module for Server Applications 15 SP2
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1
apache2
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1
apache2
Ubuntu:Pro:14.04:LTS
 before 2.4.7-1ubuntu4.22+esm2, plus listed versions
2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2
Show 21 moreShow less
2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm1
2.4.7-1ubuntu4.22+esm2
apache2
Ubuntu:Pro:16.04:LTS
 before 2.4.18-2ubuntu3.17+esm2, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 18 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm1
2.4.18-2ubuntu3.17+esm2
apache2
Ubuntu:18.04:LTS
 before 2.4.29-1ubuntu4.17, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 14 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.16
2.4.29-1ubuntu4.17
apache2
Ubuntu:20.04:LTS
 before 2.4.41-4ubuntu3.5, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.12.4.41-4ubuntu3.32.4.41-4ubuntu3.4
2.4.41-4ubuntu3.5
apache2
Ubuntu:18.04:LTS
From an advisory covering 5 CVEs
 before 2.4.29-1ubuntu4.17, plus listed versions
2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4
Show 14 moreShow less
2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.122.4.29-1ubuntu4.132.4.29-1ubuntu4.142.4.29-1ubuntu4.16
2.4.29-1ubuntu4.17
apache2
Ubuntu:20.04:LTS
From an advisory covering 5 CVEs
 before 2.4.41-4ubuntu3.5, plus listed versions
2.4.41-1ubuntu12.4.41-4ubuntu12.4.41-4ubuntu22.4.41-4ubuntu32.4.41-4ubuntu3.12.4.41-4ubuntu3.32.4.41-4ubuntu3.4
2.4.41-4ubuntu3.5
apache2
Ubuntu:Pro:14.04:LTS
From an advisory covering 3 CVEs
 before 2.4.7-1ubuntu4.22+esm2, plus listed versions
2.4.6-2ubuntu22.4.6-2ubuntu32.4.6-2ubuntu42.4.7-1ubuntu12.4.7-1ubuntu2
Show 21 moreShow less
2.4.7-1ubuntu32.4.7-1ubuntu42.4.7-1ubuntu4.12.4.7-1ubuntu4.42.4.7-1ubuntu4.52.4.7-1ubuntu4.62.4.7-1ubuntu4.72.4.7-1ubuntu4.82.4.7-1ubuntu4.92.4.7-1ubuntu4.102.4.7-1ubuntu4.112.4.7-1ubuntu4.132.4.7-1ubuntu4.152.4.7-1ubuntu4.162.4.7-1ubuntu4.172.4.7-1ubuntu4.182.4.7-1ubuntu4.192.4.7-1ubuntu4.202.4.7-1ubuntu4.212.4.7-1ubuntu4.222.4.7-1ubuntu4.22+esm1
2.4.7-1ubuntu4.22+esm2
apache2
Ubuntu:Pro:16.04:LTS
From an advisory covering 3 CVEs
 before 2.4.18-2ubuntu3.17+esm2, plus listed versions
2.4.12-2ubuntu22.4.17-1ubuntu12.4.17-2ubuntu12.4.17-3ubuntu12.4.18-1ubuntu1
Show 18 moreShow less
2.4.18-2ubuntu12.4.18-2ubuntu22.4.18-2ubuntu32.4.18-2ubuntu3.12.4.18-2ubuntu3.22.4.18-2ubuntu3.32.4.18-2ubuntu3.42.4.18-2ubuntu3.52.4.18-2ubuntu3.72.4.18-2ubuntu3.82.4.18-2ubuntu3.92.4.18-2ubuntu3.102.4.18-2ubuntu3.122.4.18-2ubuntu3.132.4.18-2ubuntu3.142.4.18-2ubuntu3.152.4.18-2ubuntu3.172.4.18-2ubuntu3.17+esm1
2.4.18-2ubuntu3.17+esm2
apache2
openSUSE:Leap 15.2
From an advisory covering 4 CVEs
 before 2.4.43-lp152.2.21.1
2.4.43-lp152.2.21.1
apache2
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 2.4.43-3.32.1
2.4.43-3.32.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-39275 is a critical vulnerability (CVSS 9.8) in Apache Http Server, published September 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 39.4%, the 98th percentile. Fixed in apache2 2.4.49-r0.

References

Show 140 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open