{"id":"CVE-2021-44224","aliases":["ALPINE-CVE-2021-44224","ALSA-2022:1915","AZL-7043","BELL-CVE-2021-44224","BIT-apache-2021-44224","CLSA-2021-1640697114","CLSA-2022-1644869383","CLSA-2022-1644869841","DEBIAN-CVE-2021-44224","DLA-2907-1","DSA-5035-1","EUVD-2021-31073","GHSA-92ww-hwmg-qq7p","MGASA-2021-0577","OESA-2021-1473","RHSA-2022:1915","RHSA-2022:6753","RHSA-2022:7143","RLSA-2022:1915","SUSE-SU-2022:0065-1","SUSE-SU-2022:0091-1","SUSE-SU-2022:0091-2","SUSE-SU-2022:0119-1","SUSE-SU-2022:0440-1","SUSE-SU-2026:2686-1","UBUNTU-CVE-2021-44224","USN-5212-1","USN-5212-2","openSUSE-SU-2022:0091-1","openSUSE-SU-2024:11695-1"],"status":"published","title":"Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.82295,"percentile":0.99666,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2021-12-20T11:20:13Z","modified":"2026-10-29T11:01:15Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"apache2","fixed_in":["2.4.52-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"httpd","fixed_in":["2.4.52-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"apache","fixed_in":["2.4.52"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"apache2","fixed_in":["2.4.52-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"apache2","fixed_in":["2.4.52-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"apache2","fixed_in":["2.4.52-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","fixed_in":["2.4.7-1ubuntu4.22+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","fixed_in":["2.4.18-2ubuntu3.17+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"apache2","fixed_in":["2.4.29-1ubuntu4.21"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"apache2","fixed_in":["2.4.41-4ubuntu3.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"apache2","fixed_in":["2.4.52-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-5.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module_el8.6.0+2872+fe0ff7aa.1.alma"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module_el8.6.0+2935+fb177b09.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Azure Linux:2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"apache","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.7"},{"fixed":"2.4.52"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-custom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-suexec-pristine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"apache2-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.18-2ubuntu3.17+tuxcare.els3"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-43.module_el8.5.0+2007+c4b14997.tuxcare.els2"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-39.module_el8.4.0+2006+b87b2deb.1.tuxcare.els3"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.25-3+deb9u12"}]}],"versions":["2.4.25-3","2.4.25-3+deb9u1","2.4.25-3+deb9u10","2.4.25-3+deb9u11","2.4.25-3+deb9u2","2.4.25-3+deb9u3","2.4.25-3+deb9u4","2.4.25-3+deb9u5","2.4.25-3+deb9u6","2.4.25-3+deb9u7","2.4.25-3+deb9u8","2.4.25-3+deb9u9"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.38-3+deb10u7"}]}],"versions":["2.4.38-3","2.4.38-3+deb10u1","2.4.38-3+deb10u2","2.4.38-3+deb10u3","2.4.38-3+deb10u4","2.4.38-3+deb10u5","2.4.38-3+deb10u6"],"bundled":2},{"source":"osv","ecosystem":"Debian:11","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1~deb11u2"}]}],"versions":["2.4.48-3.1","2.4.48-3.1+deb11u1","2.4.48-4","2.4.49-1","2.4.49-1~bpo10+1","2.4.49-1~deb11u1","2.4.49-1~deb11u2","2.4.49-1~deb11u3","2.4.49-2","2.4.49-3","2.4.49-4","2.4.50-1","2.4.50-1~deb11u1","2.4.51-1","2.4.51-1~bpo10+1","2.4.51-1~bpo10+2","2.4.51-1~deb11u1","2.4.51-2","2.4.52-1~bpo10+1","2.4.52-1~deb11u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"apache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1.mga8"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-12.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.43-12.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-filesystem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_http2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+13996+01710940"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_md-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.3.0+6814+67d1e611"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.37-47.module+el8.6.0+14529+083145da.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-23.el7.5"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el7jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-httpd-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_proxy_html-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_session-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_ssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.51-28.el8jbcs"}]}],"bundled":5},{"source":"osv","ecosystem":"Rocky Linux:8","package":"httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.37-47.module+el8.6.0+823+f143cee1.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.7-5.module+el8.6.0+823+f143cee1"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.5.0+695+1fa8055e"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.8-8.module+el8.4.0+553+7a69454b"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.23-29.83.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.33-3.61.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-35.7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.66-150400.6.57.1"}]}],"bundled":66},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.22+esm3"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1","2.4.7-1ubuntu4.22+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm4"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.21"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.9"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1ubuntu1"}]}],"versions":["2.4.48-3.1ubuntu3","2.4.48-3.1ubuntu4","2.4.51-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.21"}]}],"versions":["2.4.27-2ubuntu3","2.4.29-1ubuntu1","2.4.29-1ubuntu2","2.4.29-1ubuntu3","2.4.29-1ubuntu4","2.4.29-1ubuntu4.1","2.4.29-1ubuntu4.2","2.4.29-1ubuntu4.3","2.4.29-1ubuntu4.4","2.4.29-1ubuntu4.5","2.4.29-1ubuntu4.6","2.4.29-1ubuntu4.7","2.4.29-1ubuntu4.8","2.4.29-1ubuntu4.10","2.4.29-1ubuntu4.11","2.4.29-1ubuntu4.12","2.4.29-1ubuntu4.13","2.4.29-1ubuntu4.14","2.4.29-1ubuntu4.16","2.4.29-1ubuntu4.17","2.4.29-1ubuntu4.18","2.4.29-1ubuntu4.19","2.4.29-1ubuntu4.20"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-4ubuntu3.9"}]}],"versions":["2.4.41-1ubuntu1","2.4.41-4ubuntu1","2.4.41-4ubuntu2","2.4.41-4ubuntu3","2.4.41-4ubuntu3.1","2.4.41-4ubuntu3.3","2.4.41-4ubuntu3.4","2.4.41-4ubuntu3.5","2.4.41-4ubuntu3.6","2.4.41-4ubuntu3.7","2.4.41-4ubuntu3.8"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu4.22+esm3"}]}],"versions":["2.4.6-2ubuntu2","2.4.6-2ubuntu3","2.4.6-2ubuntu4","2.4.7-1ubuntu1","2.4.7-1ubuntu2","2.4.7-1ubuntu3","2.4.7-1ubuntu4","2.4.7-1ubuntu4.1","2.4.7-1ubuntu4.4","2.4.7-1ubuntu4.5","2.4.7-1ubuntu4.6","2.4.7-1ubuntu4.7","2.4.7-1ubuntu4.8","2.4.7-1ubuntu4.9","2.4.7-1ubuntu4.10","2.4.7-1ubuntu4.11","2.4.7-1ubuntu4.13","2.4.7-1ubuntu4.15","2.4.7-1ubuntu4.16","2.4.7-1ubuntu4.17","2.4.7-1ubuntu4.18","2.4.7-1ubuntu4.19","2.4.7-1ubuntu4.20","2.4.7-1ubuntu4.21","2.4.7-1ubuntu4.22","2.4.7-1ubuntu4.22+esm1","2.4.7-1ubuntu4.22+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.18-2ubuntu3.17+esm4"}]}],"versions":["2.4.12-2ubuntu2","2.4.17-1ubuntu1","2.4.17-2ubuntu1","2.4.17-3ubuntu1","2.4.18-1ubuntu1","2.4.18-2ubuntu1","2.4.18-2ubuntu2","2.4.18-2ubuntu3","2.4.18-2ubuntu3.1","2.4.18-2ubuntu3.2","2.4.18-2ubuntu3.3","2.4.18-2ubuntu3.4","2.4.18-2ubuntu3.5","2.4.18-2ubuntu3.7","2.4.18-2ubuntu3.8","2.4.18-2ubuntu3.9","2.4.18-2ubuntu3.10","2.4.18-2ubuntu3.12","2.4.18-2ubuntu3.13","2.4.18-2ubuntu3.14","2.4.18-2ubuntu3.15","2.4.18-2ubuntu3.17","2.4.18-2ubuntu3.17+esm1","2.4.18-2ubuntu3.17+esm2","2.4.18-2ubuntu3.17+esm3"],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"99.0.4844.84-bp153.2.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"99.0.4844.84-bp153.2.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"99.0.4844.84-bp153.2.75.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.51-3.37.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.52-1.1"}]}],"bundled":2}],"products":[{"vendor":"apache","product":"http_server"},{"vendor":"apache software foundation","product":"apache http server"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oracle","product":"communications_element_manager"},{"vendor":"oracle","product":"communications_operations_monitor"},{"vendor":"oracle","product":"communications_session_report_manager"},{"vendor":"oracle","product":"communications_session_route_manager"},{"vendor":"oracle","product":"http_server"},{"vendor":"oracle","product":"instantis_enterprisetrack"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"http://httpd.apache.org/security/vulnerabilities_24.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2021/12/20/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.debian.org/security/2022/dsa-5035","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20211224-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2022-01","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2022-03","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://support.apple.com/kb/HT213257","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213256","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213255","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/33","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/35","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2022/May/38","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202208-20","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44224","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/"},{"url":"https://github.com/advisories/GHSA-92ww-hwmg-qq7p"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-44224","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:1915","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/1966724","tags":["report"]},{"url":"https://bugzilla.redhat.com/1966728","tags":["report"]},{"url":"https://bugzilla.redhat.com/1984828","tags":["report"]},{"url":"https://bugzilla.redhat.com/2001046","tags":["report"]},{"url":"https://bugzilla.redhat.com/2005124","tags":["report"]},{"url":"https://bugzilla.redhat.com/2034672","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-1915.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2020-35452","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-33193","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-36160","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-44224","tags":["report"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-44224","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1640697114","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1644869383.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1644869841.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-44224","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0577.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29791","tags":["report"]},{"url":"https://downloads.apache.org/httpd/Announcement2.4.html","tags":["web"]},{"url":"https://downloads.apache.org/httpd/CHANGES_2.4.52","tags":["web"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["web","article","report"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1473","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44790","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034672","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1915.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-35452","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-35452","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-35452","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33193","tags":["advisory"]},{"url":"https://portswigger.net/research/http2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-36160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-36160","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36160","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44224","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6753","tags":["advisory"]},{"url":"https://access.redhat.com/articles/6975397","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095020","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6753.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-34798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-34798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34798","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-39275","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-39275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39275","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22719","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22719","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22719","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22721","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22721","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22721","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-22721","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23943","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23943","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-23943","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26377","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26377","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-26377","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28614","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28614","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28614","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28614","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28615","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-28615","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29404","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29404","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29404","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-29404","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30522","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30522","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30522","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30556","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30556","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-30556","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31813","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31813","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31813","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2022-31813","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7143","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.51/html-single/red_hat_jboss_core_services_apache_http_server_2.4.51_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010934","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7143.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-41524","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-41524","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41524","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:1915","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220065-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193942","tags":["report"]},{"url":"https://bugzilla.suse.com/1193943","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44790","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220091-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220091-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220119-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220440-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262686-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207327","tags":["report"]},{"url":"https://bugzilla.suse.com/1208708","tags":["report"]},{"url":"https://bugzilla.suse.com/1214357","tags":["report"]},{"url":"https://bugzilla.suse.com/1263935","tags":["report"]},{"url":"https://bugzilla.suse.com/1263950","tags":["report"]},{"url":"https://bugzilla.suse.com/1263951","tags":["report"]},{"url":"https://bugzilla.suse.com/1263952","tags":["report"]},{"url":"https://bugzilla.suse.com/1263953","tags":["report"]},{"url":"https://bugzilla.suse.com/1263954","tags":["report"]},{"url":"https://bugzilla.suse.com/1263955","tags":["report"]},{"url":"https://bugzilla.suse.com/1263956","tags":["report"]},{"url":"https://bugzilla.suse.com/1263957","tags":["report"]},{"url":"https://bugzilla.suse.com/1264150","tags":["report"]},{"url":"https://bugzilla.suse.com/1264163","tags":["report"]},{"url":"https://bugzilla.suse.com/1267503","tags":["report"]},{"url":"https://bugzilla.suse.com/1267955","tags":["report"]},{"url":"https://bugzilla.suse.com/1267956","tags":["report"]},{"url":"https://bugzilla.suse.com/1267962","tags":["report"]},{"url":"https://bugzilla.suse.com/1267963","tags":["report"]},{"url":"https://bugzilla.suse.com/1267965","tags":["report"]},{"url":"https://bugzilla.suse.com/1267969","tags":["report"]},{"url":"https://bugzilla.suse.com/1267970","tags":["report"]},{"url":"https://bugzilla.suse.com/1267971","tags":["report"]},{"url":"https://bugzilla.suse.com/1267972","tags":["report"]},{"url":"https://bugzilla.suse.com/1267976","tags":["report"]},{"url":"https://bugzilla.suse.com/1267977","tags":["report"]},{"url":"https://bugzilla.suse.com/1267978","tags":["report"]},{"url":"https://bugzilla.suse.com/690734","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2006-20001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-36760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-25690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-39884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42516","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-43204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-23048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-49812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-53020","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-55753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-58098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-65082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-66200","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-24072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-28780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29167","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-29170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33006","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-33857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-34356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-43951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44186","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-44631","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49975","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-44224","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5212-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5212-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-44790","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LQX4BVMFKUTV6DOPDTL26H5DQJJFUPXZ/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-44224","title":"Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T11:20:13Z","modified":"2024-08-04T04:17:24.919Z","cwes":["CWE-476"],"updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31073","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T11:20:13Z","modified":"2024-08-04T04:17:24Z","updated_at":"2026-11-03T03:24:12.005069Z"}],"ghsa":[{"id":"GHSA-92ww-hwmg-qq7p","title":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash ...","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2022-02-08T00:00:56Z","modified":"2023-01-27T05:00:54Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:41:46.4155Z"}],"nvd":[{"id":"CVE-2021-44224","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:07.393Z","modified":"2026-06-17T04:12:04.89Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:02.566991Z"}],"osv":[{"id":"ALPINE-CVE-2021-44224","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:07.393Z","modified":"2026-10-23T17:17:56.225087588Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"AZL-7043","title":"CVE-2021-44224 affecting package httpd for versions less than 2.4.52-1","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:07Z","modified":"2026-04-21T04:36:23.69047Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:08.907584Z"},{"id":"BELL-CVE-2021-44224","title":"CVE-2021-44224 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:20.98089Z","modified":"2026-01-26T10:04:52.267346Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-44224","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:07.393Z","modified":"2026-10-24T10:30:45.511718183Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:21.877444Z"},{"id":"DEBIAN-CVE-2021-44224","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:07.393Z","modified":"2026-10-23T18:04:16.870340765Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:35.799676Z"},{"id":"OESA-2021-1473","title":"httpd security update","description":" Apache HTTP Server.\r\n\r\nSecurity Fix(es):\r\n\r\nA crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).(CVE-2021-44224)\r\n\r\nA carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.(CVE-2021-44790)","status":"published","published":"2021-12-25T11:04:44Z","modified":"2026-08-18T01:16:16.807129703Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2022:1915","title":"Red Hat Security Advisory: httpd:2.4 security and bug fix update","status":"published","published":"2024-09-13T20:34:00Z","modified":"2026-10-09T10:04:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6753","title":"Red Hat Security Advisory: httpd24-httpd security and bug fix update","status":"published","published":"2024-09-13T23:20:13Z","modified":"2026-10-09T10:04:48Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7143","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update","status":"published","published":"2024-09-13T20:33:46Z","modified":"2026-10-09T10:05:13Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:1915","title":"Moderate: httpd:2.4 security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\n* httpd: Single zero byte stack overflow in mod_auth_digest (CVE-2020-35452)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:07:40Z","modified":"2026-02-04T09:45:07.16952Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-44224","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2021-12-20T12:15:00Z","modified":"2026-04-22T13:02:19.143159Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:29.220315Z"},{"id":"ALSA-2022:1915","title":"Moderate: httpd:2.4 security and bug fix update","description":"The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.\n\nSecurity Fix(es):\n\n* httpd: Request splitting via HTTP/2 method injection and mod_proxy (CVE-2021-33193)\n\n* httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path (CVE-2021-36160)\n\n* httpd: possible NULL dereference or SSRF in forward proxy configurations (CVE-2021-44224)\n\n* httpd: Single zero byte stack overflow in mod_auth_digest (CVE-2020-35452)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:07:40Z","modified":"2026-10-29T11:01:15.87935591Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"BIT-apache-2021-44224","title":"Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier","description":"A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).","status":"published","published":"2024-03-06T10:54:18.475Z","modified":"2026-09-08T08:45:42.17688445Z","updated_at":"2026-11-02T15:28:28.267217Z"},{"id":"CLSA-2021-1640697114","title":"Fix CVE(s): CVE-2021-44224, CVE-2021-44970","description":"\n   * SECURITY UPDATE: buffer overflow in the mod_lua multipart parser\n     - debian/patches/CVE-2021-44970.patch: add test to prevent integer overflow in req_parsebody()\n     - CVE-2021-44970\n   * SECURITY UPDATE: null pointer dereference in reverse proxy module\n     - debian/patches/CVE-2021-44224.patch: add tests for return value of ap_proxy_de_socketfy()\n     - CVE-2021-44224","status":"published","published":"2021-12-28T13:11:54Z","modified":"2026-06-04T10:03:30.1132Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1644869383","title":"Fix of CVE: CVE-2021-39275, CVE-2021-36160, CVE-2021-34798, CVE-2021-44224","description":"- CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations\n- CVE-2021-39275: out-of-bounds write in ap_escape_quotes() via malicious input\n- CVE-2021-36160: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path\n- CVE-2021-34798: NULL pointer dereference via malformed requests","status":"published","published":"2022-02-14T20:09:43Z","modified":"2026-10-21T10:47:59.43345934Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1644869841","title":"Fix of CVE: CVE-2021-34798, CVE-2021-39275, CVE-2021-36160, CVE-2021-44224","description":"- CVE-2021-44224: possible NULL dereference or SSRF in forward proxy configurations\n- CVE-2021-39275: out-of-bounds write in ap_escape_quotes() via malicious input\n- CVE-2021-36160: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path\n- CVE-2021-34798: NULL pointer dereference via malformed requests","status":"published","published":"2022-02-14T20:17:21Z","modified":"2026-10-21T10:47:06.840840995Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2907-1","title":"apache2 - security update","status":"published","published":"2022-02-01T00:00:00Z","modified":"2026-03-09T01:18:38.899981Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5035-1","title":"apache2 - security update","status":"published","published":"2022-01-04T00:00:00Z","modified":"2026-03-09T02:10:27.62952Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2021-0577","title":"Updated apache packages fix security vulnerabilities","description":"Updated apache packages fix security vulnerabilities:\nA crafted URI sent to httpd configured as a forward proxy (ProxyRequests\non) can cause a crash (NULL pointer dereference) or, for configurations\nmixing forward and reverse proxy declarations, can allow for requests to\nbe directed to a declared Unix Domain Socket endpoint (Server Side Request\nForgery) (CVE-2021-44224).\n\nA carefully crafted request body can cause a buffer overflow in the mod_lua\nmultipart parser (r:parsebody() called from Lua scripts). The Apache httpd\nteam is not aware of an exploit for the vulnerability though it might be\npossible to craft one (CVE-2021-44790).\n","status":"published","published":"2021-12-21T23:27:37Z","modified":"2026-05-16T06:31:09.648676Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:0091-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\nApache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)\n\nIt fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.\n\nSee https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.\n\nAlso fixed:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)\n- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)\n\n","status":"published","published":"2022-01-17T15:25:36Z","modified":"2026-02-04T02:27:16.200377Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11695-1","title":"apache2-2.4.52-1.1 on GA media","description":"These are all security issues fixed in the apache2-2.4.52-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:15.307293Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:0065-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)\n- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)\n","status":"published","published":"2022-01-12T16:47:51Z","modified":"2026-02-04T04:39:27.410178Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0091-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\nApache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)\n\nIt fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.\n\nSee https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.\n\nAlso fixed:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)\n- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)\n\n","status":"published","published":"2022-01-17T15:25:34Z","modified":"2026-02-04T03:58:06.486168Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0091-2","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\nApache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)\n\nIt fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.\n\nSee https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.\n\nAlso fixed:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)\n- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)\n\n","status":"published","published":"2022-01-20T15:28:01Z","modified":"2026-02-04T03:46:13.357333Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0119-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations. (bsc#1193943)\n- CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua. (bsc#1193942)\n","status":"published","published":"2022-01-18T16:51:24Z","modified":"2026-02-04T03:22:24.039351Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:0440-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues:\n\n- CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)\n- CVE-2021-44790: Fixed a buffer overflow when parsing multipart content in mod_lua (bsc#1193942)\n\nThis update also enables TLS 1.3 support, by building against openssl 1.1 [jsc#SLE-18664]\n","status":"published","published":"2022-02-16T12:08:09Z","modified":"2026-02-04T04:39:51.650305Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2026:2686-1","title":"Security update for apache2","description":"This update for apache2 fixes the following issues\n\n- CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).\n- CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).\n- CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).\n- CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).\n- CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).\n- CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests (bsc#1263956).\n- CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).\n- CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).\n- CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to crash a child\n  processes (bsc#1263954).\n- CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).\n- CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).\n- CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check (bsc#1263951).\n- CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).\n- CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).\n- CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).\n- CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).\n- CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).\n- CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).\n- CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).\n- CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).\n- CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a denial of\n  service (bsc#1267970).\n- CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).\n- CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-free\n  (bsc#1267972).\n- CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).\n\nNon security issue:\n\n- Update to 2.4.66 (jsc#PED-16334).\n","status":"published","published":"2026-06-29T22:36:03Z","modified":"2026-07-01T09:45:04.712117752Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"USN-5212-1","title":"apache2 vulnerabilities","description":"It was discovered that the Apache HTTP Server incorrectly handled certain\nforward proxy requests. A remote attacker could use this issue to cause\nthe server to crash, resulting in a denial of service, or possibly perform\na Server Side Request Forgery attack. (CVE-2021-44224)\n\nIt was discovered that the Apache HTTP Server Lua module incorrectly\nhandled memory in the multipart parser. A remote attacker could use this\nissue to cause the server to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2021-44790)\n","status":"published","published":"2022-01-06T14:48:19Z","modified":"2026-04-22T10:19:28.717427Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5212-2","title":"apache2 vulnerabilities","description":"USN-5212-1 fixed several vulnerabilities in Apache. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that the Apache HTTP Server incorrectly handled certain\n forward proxy requests. A remote attacker could use this issue to cause\n the server to crash, resulting in a denial of service, or possibly perform\n a Server Side Request Forgery attack. (CVE-2021-44224)\n\n It was discovered that the Apache HTTP Server Lua module incorrectly\n handled memory in the multipart parser. A remote attacker could use this\n issue to cause the server to crash, resulting in a denial of service, or\n possibly execute arbitrary code. (CVE-2021-44790)\n","status":"published","published":"2022-01-10T11:14:47Z","modified":"2026-06-29T13:49:35.443473016Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}