{"id":"CVE-2021-40438","aliases":["ALBA-2021:4604","ALPINE-CVE-2021-40438","ALSA-2021:3816","ALSA-2021:4537","AZL-6487","BELL-CVE-2021-40438","BIT-apache-2021-40438","CLSA-2021-1635458969","CLSA-2022-1643747448","DEBIAN-CVE-2021-40438","DLA-2776-1","DSA-4982-1","EUVD-2021-27615","GHSA-rwxq-58vm-3v2j","MGASA-2021-0439","OESA-2021-1369","RHSA-2021:3746","RHSA-2021:3754","RHSA-2021:3816","RHSA-2021:3836","RHSA-2021:3837","RHSA-2021:3856","RLSA-2021:3816","SUSE-SU-2021:3299-1","SUSE-SU-2021:3335-1","SUSE-SU-2021:3522-1","UBUNTU-CVE-2021-40438","USN-5090-1","USN-5090-2","openSUSE-SU-2021:1438-1","openSUSE-SU-2021:3522-1","openSUSE-SU-2025:14708-1"],"status":"published","title":"mod_proxy SSRF","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","severity":{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.99999,"percentile":0.99997,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-918"],"published":"2021-09-16T14:40:23Z","modified":"2026-10-29T11:02:08Z","kev":{"date_added":"2021-12-01","due_date":"2021-12-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"exploitation":[{"source":"euvd","since":"2021-12-01"},{"source":"kev","since":"2021-12-01"}],"exploits":[{"source":"pocgithub","id":"xiaojiangxl/CVE-2021-40438","title":"xiaojiangxl/CVE-2021-40438","date":"2021-10-18","url":"https://github.com/xiaojiangxl/CVE-2021-40438"},{"source":"pocgithub","id":"sixpacksecurity/CVE-2021-40438","title":"sixpacksecurity/CVE-2021-40438","date":"2021-10-24","url":"https://github.com/sixpacksecurity/CVE-2021-40438"},{"source":"pocgithub","id":"BabyTeam1024/CVE-2021-40438","title":"BabyTeam1024/CVE-2021-40438","date":"2021-10-28","url":"https://github.com/BabyTeam1024/CVE-2021-40438"},{"source":"pocgithub","id":"ericmann/apache-cve-poc","title":"ericmann/apache-cve-poc","date":"2021-11-11","url":"https://github.com/ericmann/apache-cve-poc"},{"source":"pocgithub","id":"pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt","title":"pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt","date":"2021-11-30","url":"https://github.com/pisut4152/Sigma-Rule-for-CVE-2021-40438-exploitation-attempt"},{"source":"pocgithub","id":"Kashkovsky/CVE-2021-40438","title":"Kashkovsky/CVE-2021-40438","date":"2022-04-03","url":"https://github.com/Kashkovsky/CVE-2021-40438"},{"source":"pocgithub","id":"gassara-kys/CVE-2021-40438","title":"gassara-kys/CVE-2021-40438","date":"2022-06-10","url":"https://github.com/gassara-kys/CVE-2021-40438"},{"source":"pocgithub","id":"sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit","title":"sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit","date":"2023-12-12","url":"https://github.com/sergiovks/CVE-2021-40438-Apache-2.4.48-SSRF-exploit"},{"source":"pocgithub","id":"Cappricio-Securities/CVE-2021-40438","title":"Cappricio-Securities/CVE-2021-40438","date":"2024-05-19","url":"https://github.com/Cappricio-Securities/CVE-2021-40438"},{"source":"pocgithub","id":"yakir2b/check-point-gateways-rce","title":"yakir2b/check-point-gateways-rce","date":"2025-01-22","url":"https://github.com/yakir2b/check-point-gateways-rce"},{"source":"pocgithub","id":"n0m-d/CVE-2021-40438-POC","title":"n0m-d/CVE-2021-40438-POC","date":"2025-11-09","url":"https://github.com/n0m-d/CVE-2021-40438-POC"},{"source":"nuclei","id":"CVE-2021-40438","title":"Apache \u003c= 2.4.48 Mod_Proxy - Server-Side Request Forgery","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40438.yaml"}],"fixes":[{"ecosystem":"AlmaLinux:8","package":"mod_http2","fixed_in":["1.15.7-3.module_el8.5.0+2609+b30d9eec"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"mod_md","fixed_in":["1:2.0.8-8.module_el8.5.0+2609+b30d9eec","1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.49-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"httpd","fixed_in":["2.4.52-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.49"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.49-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.49-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.49-1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","fixed_in":["0:1.3.16-7.Final_redhat_2.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","fixed_in":["0:1.3.16-7.Final_redhat_2.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","fixed_in":["0:1.15.7-19.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","fixed_in":["0:1.15.7-19.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","fixed_in":["0:1.2.48-18.redhat_1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","fixed_in":["0:1.2.48-18.redhat_1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","fixed_in":["0:1.2.48-18.redhat_1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-manual","fixed_in":["0:1.2.48-18.redhat_1.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","fixed_in":["1:2.0.8-38.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","fixed_in":["1:2.0.8-38.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","fixed_in":["1:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","fixed_in":["0:2.9.2-65.GA.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","fixed_in":["0:2.9.2-65.GA.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","fixed_in":["0:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","fixed_in":["1:2.4.37-76.jbcs.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native","fixed_in":["0:1.3.16-7.Final_redhat_2.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native-debuginfo","fixed_in":["0:1.3.16-7.Final_redhat_2.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","fixed_in":["0:1.15.7-19.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","fixed_in":["0:1.15.7-19.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","fixed_in":["0:1.2.48-18.redhat_1.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","fixed_in":["0:1.2.48-18.redhat_1.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","fixed_in":["0:1.2.48-18.redhat_1.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-manual","fixed_in":["0:1.2.48-18.redhat_1.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md","fixed_in":["1:2.0.8-38.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md-debuginfo","fixed_in":["1:2.0.8-38.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","fixed_in":["1:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","fixed_in":["1:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","fixed_in":["0:2.9.2-65.GA.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","fixed_in":["0:2.9.2-65.GA.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","fixed_in":["0:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","fixed_in":["1:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","fixed_in":["1:2.4.37-76.el8jbcs"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-debuginfo","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-devel","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-manual","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-tools","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ldap","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_proxy_html","fixed_in":["1:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_session","fixed_in":["0:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ssl","fixed_in":["1:2.4.34-22.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-debuginfo","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-debugsource","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-devel","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-filesystem","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-manual","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-tools","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-tools-debuginfo","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2","fixed_in":["0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2-debuginfo","fixed_in":["0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2-debugsource","fixed_in":["0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ldap","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ldap-debuginfo","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md","fixed_in":["1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md-debuginfo","fixed_in":["1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md-debugsource","fixed_in":["1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_proxy_html","fixed_in":["1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_proxy_html-debuginfo","fixed_in":["1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_session","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_session-debuginfo","fixed_in":["0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ssl","fixed_in":["1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ssl-debuginfo","fixed_in":["1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-debuginfo","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-debugsource","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-devel","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-filesystem","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-manual","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-tools","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-tools-debuginfo","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2","fixed_in":["0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2-debuginfo","fixed_in":["0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2-debugsource","fixed_in":["0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ldap","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ldap-debuginfo","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_md","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_md-debuginfo","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_proxy_html","fixed_in":["1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_proxy_html-debuginfo","fixed_in":["1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_session","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_session-debuginfo","fixed_in":["0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ssl","fixed_in":["1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ssl-debuginfo","fixed_in":["1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-debuginfo","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-devel","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-manual","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-tools","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ldap","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_proxy_html","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_session","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ssl","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-debuginfo","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-devel","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-manual","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-tools","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ldap","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_proxy_html","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_session","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ssl","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-devel","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-manual","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-tools","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_ssl","fixed_in":["1:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-devel","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-manual","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-tools","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_ssl","fixed_in":["1:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-devel","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-manual","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-tools","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_session","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_ssl","fixed_in":["1:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-devel","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-manual","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-tools","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_session","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_ssl","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-devel","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-manual","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-tools","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_session","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_ssl","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-devel","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-manual","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-tools","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_session","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_ssl","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-devel","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-manual","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-tools","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_session","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_ssl","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-devel","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-manual","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-tools","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_session","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_ssl","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-devel","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-manual","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-tools","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_session","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_ssl","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-debuginfo","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-devel","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-manual","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-tools","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_session","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ssl","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_ldap","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_session","fixed_in":["0:2.4.6-40.el7_2.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_ldap","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_session","fixed_in":["0:2.4.6-45.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_ldap","fixed_in":["0:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-67.el7_4.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_ldap","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_ldap","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_ldap","fixed_in":["0:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-89.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_ldap","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_ldap","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_ldap","fixed_in":["0:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-90.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ldap","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_proxy_html","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-debuginfo","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-devel","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-manual","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-tools","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_session","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ssl","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ldap","fixed_in":["0:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_proxy_html","fixed_in":["1:2.4.6-97.el7_9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.17+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"apache2","fixed_in":["2.4.29-1ubuntu4.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"apache2","fixed_in":["2.4.41-4ubuntu3.6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"owasp-modsecurity-crs","fixed_in":["4.9.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-3.module_el8.5.0+2609+b30d9eec"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.5.0+2609+b30d9eec"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-3.module_el8.5.0+2609+b30d9eec"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.5.0+2609+b30d9eec"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-3.module_el8.5.0+2609+b30d9eec"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.5.0+2609+b30d9eec"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.4.49"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.19"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-3.module_el8.4.0+2002+7519fa2d"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.4.0+2002+7519fa2d"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2002+7519fa2d.1.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-3+deb9u11"}]}],"versions":["2.4.25-3","2.4.25-3+deb9u1","2.4.25-3+deb9u10","2.4.25-3+deb9u2","2.4.25-3+deb9u3","2.4.25-3+deb9u4","2.4.25-3+deb9u5","2.4.25-3+deb9u6","2.4.25-3+deb9u7","2.4.25-3+deb9u8","2.4.25-3+deb9u9"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3+deb10u6"}]}],"versions":["2.4.38-3","2.4.38-3+deb10u1","2.4.38-3+deb10u2","2.4.38-3+deb10u3","2.4.38-3+deb10u4","2.4.38-3+deb10u5"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-1~deb11u1"}]}],"versions":["2.4.48-3.1","2.4.48-3.1+deb11u1","2.4.48-4","2.4.49-1","2.4.49-1~bpo10+1","2.4.49-1~deb11u1","2.4.49-1~deb11u2","2.4.49-1~deb11u3","2.4.49-2","2.4.49-3","2.4.49-4","2.4.50-1","2.4.50-1~deb11u1","2.4.51-1~bpo10+1","2.4.51-1~bpo10+2"],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-9.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-9.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-7.Final_redhat_2.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-7.Final_redhat_2.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-19.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-19.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-38.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-38.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-65.GA.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-65.GA.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.jbcs.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-7.Final_redhat_2.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_cluster-native-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.16-7.Final_redhat_2.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-19.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-19.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.48-18.redhat_1.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-38.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-38.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-65.GA.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_security-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.2-65.GA.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-76.el8jbcs"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-22.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-3.module+el8.4.0+8625+d397f3da"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-3.module+el8.4.0+8625+d397f3da"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-3.module+el8.4.0+8625+d397f3da"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module+el8.4.0+12865+a7065a39.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_md-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-7.module+el8.2.0+5531+7e4d69a2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-21.module+el8.2.0+12904+53ee7aba.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-16.module+el8.1.0+12900+7e6e5641.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-40.el7_2.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-45.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-67.el7_4.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.6::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.6::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-89.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-90.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.6-97.el7_9.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-39.module+el8.4.0+571+fd70afb1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-3.module+el8.4.0+553+7a69454b"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-3.module+el8.5.0+695+1fa8055e"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.5.0+695+1fa8055e"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.4.0+553+7a69454b"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.80.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm3"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.18"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.6"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.17"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.5"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.22+esm2"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm2"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-lp152.2.21.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-3.32.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"owasp-modsecurity-crs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.0-1.1"}]}]}],"products":[{"vendor":"apache","product":"apache"},{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"},{"vendor":"broadcom","product":"brocade_fabric_operating_system_firmware"},{"vendor":"debian","product":"debian_linux"},{"vendor":"f5","product":"f5os"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"clustered_data_ontap"},{"vendor":"netapp","product":"storagegrid"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"instantis_enterprisetrack"},{"vendor":"oracle","product":"secure_global_desktop"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64"},{"vendor":"redhat","product":"enterprise_linux_for_arm_64_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus"},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus_s390x"},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian"},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus"},{"vendor":"redhat","product":"enterprise_linux_for_scientific_computing"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_server_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_update_services_for_sap_solutions"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"jboss_core_services"},{"vendor":"redhat","product":"software_collections"},{"vendor":"resf","product":"rocky_linux"},{"vendor":"siemens","product":"ruggedcom_nms"},{"vendor":"siemens","product":"sinec_nms"},{"vendor":"siemens","product":"sinema_remote_connect_server"},{"vendor":"siemens","product":"sinema_server"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory","web","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Release Notes","article","advisory"]},{"url":"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Release Notes","article","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://www.debian.org/security/2021/dsa-4982","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00%40%3Cusers.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","discussion","article"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://www.tenable.com/security/tns-2021-17","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211008-0004/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-20","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40438","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40438","tags":["web","advisory"]},{"url":"https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a@%3Cusers.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37@%3Cbugs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6954e60b1c8e480678ce3d02f61b8a788997785652e9557a3265c00@%3Cusers.httpd.apache.org%3E"},{"url":"https://security.netapp.com/advisory/ntap-20211008-0004"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD"},{"url":"https://github.com/advisories/GHSA-rwxq-58vm-3v2j"},{"url":"https://errata.almalinux.org/8/ALBA-2021-4604.html","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-40438","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-3816.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-26691","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-40438","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2021-4537.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-20325","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-40438","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635458969","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1643747448.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-40438","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0439.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29466","tags":["report"]},{"url":"https://downloads.apache.org/httpd/Announcement2.4.html","tags":["web"]},{"url":"https://downloads.apache.org/httpd/CHANGES_2.4.49","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1369","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34798","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3746","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005117","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3746.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-40438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40438","tags":["advisory","report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3754","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3754.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3816","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966732","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3816.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-26691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-26691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26691","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3836","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3836.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3837","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3837.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:3856","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3856.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:3816","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213299-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1190666","tags":["report"]},{"url":"https://bugzilla.suse.com/1190669","tags":["report"]},{"url":"https://bugzilla.suse.com/1190703","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-34798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-39275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40438","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213335-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189387","tags":["report"]},{"url":"https://bugzilla.suse.com/1190702","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-33193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36160","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213522-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40438","tags":["report"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2021-40438","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5090-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5090-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5090-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-33193","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-34798","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-36160","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-39275","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H4TEWXB67RJ5IPKHZI6FBQ67CJEHGI3B/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JKKOECDBM5767TKS4AX32R26YLJDYTJT/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5RZA3QZZUTFNFHPJESYW5I7GDZGWBEQF/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-40438","title":"mod_proxy SSRF","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T14:40:23Z","modified":"2026-08-06T03:55:20.326Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:33:01.852999Z"}],"euvd":[{"id":"EUVD-2021-27615","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T14:40:23Z","modified":"2026-08-06T03:55:20Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2021-12-01","updated_at":"2026-11-02T18:02:09.520152Z"}],"ghsa":[{"id":"GHSA-rwxq-58vm-3v2j","title":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen...","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2022-05-24T19:14:50Z","modified":"2025-10-22T00:32:23Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:04:05.344883Z"}],"kev":[{"id":"CVE-2021-40438","title":"Apache HTTP Server-Side Request Forgery (SSRF)","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","cwes":["CWE-918"],"kev":{"date_added":"2021-12-01","due_date":"2021-12-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Known"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2021-40438","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:07.633Z","modified":"2026-08-06T05:16:35.67Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:06:58.933037Z"}],"osv":[{"id":"ALPINE-CVE-2021-40438","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:07.633Z","modified":"2026-10-23T17:17:56.210692093Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-6487","title":"CVE-2021-40438 affecting package httpd for versions less than 2.4.52-1","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:07Z","modified":"2026-04-21T04:32:35.685842Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"BELL-CVE-2021-40438","title":"CVE-2021-40438 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:56.436247Z","modified":"2026-01-26T09:47:56.386266Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-40438","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:07.633Z","modified":"2026-10-24T10:30:25.871326028Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-40438","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:07.633Z","modified":"2026-10-23T18:03:33.005725983Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1369","title":"httpd security update","description":"Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server.\r\n\r\nSecurity Fix(es):\r\n\r\nA carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).(CVE-2021-36160)\r\n\r\nMalformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-34798)\r\n\r\nA crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.(CVE-2021-40438)","status":"published","published":"2021-09-30T11:04:38Z","modified":"2026-08-18T01:16:02.486150805Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:3746","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update","status":"published","published":"2024-09-13T17:28:39Z","modified":"2026-09-21T10:03:04Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3754","title":"Red Hat Security Advisory: httpd24-httpd security update","status":"published","published":"2024-09-13T17:28:47Z","modified":"2026-09-21T10:03:04Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3816","title":"Red Hat Security Advisory: httpd:2.4 security update","status":"published","published":"2024-09-13T20:30:34Z","modified":"2026-09-21T10:03:05Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3836","title":"Red Hat Security Advisory: httpd:2.4 security update","status":"published","published":"2024-09-13T17:28:07Z","modified":"2026-09-21T10:03:06Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3837","title":"Red Hat Security Advisory: httpd:2.4 security update","status":"published","published":"2024-09-13T17:28:14Z","modified":"2026-09-21T10:03:06Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:3856","title":"Red Hat Security Advisory: httpd security update","status":"published","published":"2024-09-13T17:28:21Z","modified":"2026-09-21T10:03:07Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:3816","title":"Important: httpd:2.4 security update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_proxy: SSRF via a crafted request uri-path containing \"unix:\" (CVE-2021-40438)\n\n* httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-10-12T15:53:03Z","modified":"2026-02-04T14:45:04.16575Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-40438","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2021-09-16T15:15:00Z","modified":"2026-04-22T13:00:45.645695Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALBA-2021:4604","title":"httpd:2.4 bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nBug Fix(es):\n\n* proxy rewrite to unix socket fails with CVE-2021-40438 fix (BZ#2017854, BZ#2017855, BZ#2017856)","status":"published","published":"2021-11-10T09:00:43Z","modified":"2026-10-29T11:02:08.165269443Z","updated_at":"2026-11-02T15:27:45.973197Z"},{"id":"ALSA-2021:3816","title":"Important: httpd:2.4 security update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: mod_proxy: SSRF via a crafted request uri-path containing \"unix:\" (CVE-2021-40438)\n\n* httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-10-12T15:53:03Z","modified":"2026-10-29T11:00:46.759145556Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"ALSA-2021:4537","title":"Important: httpd:2.4 security update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in AlmaLinux (CVE-2021-20325)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-11-09T19:25:44Z","modified":"2026-10-29T11:01:40.654156135Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-apache-2021-40438","title":"mod_proxy SSRF","description":"A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","status":"published","published":"2024-03-06T10:55:02.2Z","modified":"2026-10-16T09:45:03.884284988Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"CLSA-2021-1635458969","title":"Fix CVE(s): CVE-2021-40438, CVE-2021-34798, CVE-2021-39275","description":"\n   * SECURITY UPDATE: Buffer overflow with crafted input\n     - debian/patches/CVE-2021-39275.patch:ap_escape_quotes() may write beyond\n       the end of a buffer when given malicious input\n     - CVE-2021-39275\n   * SECURITY UPDATE: Malformed requests may cause the server to dereference a NULL pointer\n     - debian/patches/CVE-2021-34798.patch: prevent ap_increment_counts() from pointer\n       dereference without check\n     - CVE-2021-34798\n   * SECURITY UPDATE: A crafted request uri-path can cause mod_proxy to forward the request\n     to an origin server choosen by the remote user.\n     - debian/patches/CVE-2021-40438.patch: add checks for the configured UDS path\n     - CVE-2021-40438","status":"published","published":"2021-10-28T22:09:29Z","modified":"2026-06-04T10:03:57.053419935Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1643747448","title":"Fix of CVE: CVE-2021-26690, CVE-2021-30641, CVE-2021-40438","description":"\n- CVE-2021-40438: mod_proxy: SSRF via a crafted request uri-path\n- CVE-2021-30641: MergeSlashes regression\n- CVE-2021-26690: mod_session NULL pointer dereference in parser","status":"published","published":"2022-02-01T20:30:48Z","modified":"2026-06-01T00:33:19.078081216Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2776-1","title":"apache2 - security update","status":"published","published":"2021-10-02T00:00:00Z","modified":"2026-03-09T01:21:12.779203Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-4982-1","title":"apache2 - security update","status":"published","published":"2021-10-08T00:00:00Z","modified":"2026-03-09T02:09:02.78303Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0439","title":"Updated apache packages fix security vulnerability","description":"A crafted method sent through HTTP/2 will bypass validation and be\nforwarded by mod_proxy, which can lead to request splitting or cache\npoisoning. (CVE-2021-33193)\n\nMalformed requests may cause the server to dereference a NULL pointer.\n(CVE-2021-34798)\n\nA carefully crafted request uri-path can cause mod_proxy_uwsgi to read\nabove the allocated memory and crash (DoS). (CVE-2021-36160)\n\nap_escape_quotes() may write beyond the end of a buffer when given\nmalicious input. No included modules pass untrusted data to these\nfunctions, but third-party / external modules may. (CVE-2021-39275)\n\nA crafted request uri-path can cause mod_proxy to forward the request to\nan origin server choosen by the remote user. (CVE-2021-40438)\n","status":"published","published":"2021-09-23T04:49:29Z","modified":"2026-04-16T04:42:42.080620113Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1438-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)\n- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)\n- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)\n- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-11-02T11:51:52Z","modified":"2026-02-04T02:47:39.840785Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3522-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)\n- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)\n- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)\n- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)\n","status":"published","published":"2021-10-26T13:40:11Z","modified":"2026-02-04T03:56:08.500051Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2025:14708-1","title":"owasp-modsecurity-crs-4.9.0-1.1 on GA media","description":"These are all security issues fixed in the owasp-modsecurity-crs-4.9.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-01-28T00:00:00Z","modified":"2026-02-04T03:46:56.851996Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2021:3299-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)\n- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)\n- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)\n","status":"published","published":"2021-10-06T14:56:54Z","modified":"2025-05-02T04:10:44.384201Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3335-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)\n- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)\n- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)\n- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)\n- CVE-2021-33193: Fixed request splitting via HTTP/2 method injection and mod_proxy. (bsc#1189387)\n","status":"published","published":"2021-10-12T06:19:02Z","modified":"2026-02-04T03:56:31.213024Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3522-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-40438: Fixed a SRF via a crafted request uri-path. (bsc#1190703)\n- CVE-2021-36160: Fixed an out-of-bounds read via a crafted request uri-path. (bsc#1190702)\n- CVE-2021-39275: Fixed an out-of-bounds write in ap_escape_quotes() via malicious input. (bsc#1190666)\n- CVE-2021-34798: Fixed a NULL pointer dereference via malformed requests. (bsc#1190669)\n","status":"published","published":"2021-10-26T13:40:10Z","modified":"2026-02-04T03:25:39.940824Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5090-1","title":"apache2 vulnerabilities","description":"James Kettle discovered that the Apache HTTP Server HTTP/2 module\nincorrectly handled certain crafted methods. A remote attacker could\npossibly use this issue to perform request splitting or cache poisoning\nattacks. (CVE-2021-33193)\n\nIt was discovered that the Apache HTTP Server incorrectly handled certain\nmalformed requests. A remote attacker could possibly use this issue to\ncause the server to crash, resulting in a denial of service.\n(CVE-2021-34798)\n\nLi Zhi Xin discovered that the Apache mod_proxy_uwsgi module incorrectly\nhandled certain request uri-paths. A remote attacker could possibly use\nthis issue to cause the server to crash, resulting in a denial of service.\nThis issue only affected Ubuntu 20.04 LTS and Ubuntu 21.04.\n(CVE-2021-36160)\n\nIt was discovered that the Apache HTTP Server incorrectly handled escaping\nquotes. If the server was configured with third-party modules, a remote\nattacker could use this issue to cause the server to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2021-39275)\n\nIt was discovered that the Apache mod_proxy module incorrectly handled\ncertain request uri-paths. A remote attacker could possibly use this issue\nto cause the server to forward requests to arbitrary origin servers.\n(CVE-2021-40438)\n","status":"published","published":"2021-09-27T14:06:45Z","modified":"2026-04-22T10:18:11.742873Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5090-2","title":"apache2 vulnerabilities","description":"USN-5090-1 fixed several vulnerabilities in Apache. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that the Apache HTTP Server incorrectly handled certain\n malformed requests. A remote attacker could possibly use this issue to\n cause the server to crash, resulting in a denial of service.\n (CVE-2021-34798)\n\n It was discovered that the Apache HTTP Server incorrectly handled escaping\n quotes. If the server was configured with third-party modules, a remote\n attacker could use this issue to cause the server to crash, resulting in a\n denial of service, or possibly execute arbitrary code. (CVE-2021-39275)\n\n It was discovered that the Apache mod_proxy module incorrectly handled\n certain request uri-paths. A remote attacker could possibly use this issue\n to cause the server to forward requests to arbitrary origin servers.\n (CVE-2021-40438)\n","status":"published","published":"2021-09-27T16:46:11Z","modified":"2026-06-29T13:49:33.710848621Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}