Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-36160HistorySep 16, 2021 - 3:15 p.m.
CVE-2021-36160
2021-09-1615:15:00
Debian Security Bug Tracker
security-tracker.debian.org
17
0.002 Low
EPSS
Percentile
52.9%
A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | <Â 2.4.49-1 | apache2_2.4.49-1_all.deb |
| Debian | 11 | all | apache2 | <Â 2.4.51-1~deb11u1 | apache2_2.4.51-1~deb11u1_all.deb |
| Debian | 10 | all | apache2 | <Â 2.4.38-3+deb10u6 | apache2_2.4.38-3+deb10u6_all.deb |
| Debian | 999 | all | apache2 | <Â 2.4.49-1 | apache2_2.4.49-1_all.deb |
| Debian | 13 | all | apache2 | <Â 2.4.49-1 | apache2_2.4.49-1_all.deb |
| Debian | 12 | all | uwsgi | <=Â 2.0.21-5.1 | uwsgi_2.0.21-5.1_all.deb |
| Debian | 11 | all | uwsgi | <=Â 2.0.19.1-7.1 | uwsgi_2.0.19.1-7.1_all.deb |
| Debian | 10 | all | uwsgi | <=Â 2.0.18-1 | uwsgi_2.0.18-1_all.deb |
| Debian | 999 | all | uwsgi | <=Â 2.0.25.1-1 | uwsgi_2.0.25.1-1_all.deb |
| Debian | 13 | all | uwsgi | <=Â 2.0.25.1-1 | uwsgi_2.0.25.1-1_all.deb |
Related
cnvd
cnvd
Apache HTTP Server Denial of Service Vulnerability (CNVD-2022-03205)
2021-09-18 00:00:00
cve
cve
CVE-2021-36160
2021-09-16 15:15:07
cvelist
cvelist
CVE-2021-36160 mod_proxy_uwsgi out of bound read
2021-09-16 14:40:18
nessus
nessus
Apache >= 2.4.30 < 2.4.49 mod_proxy_uwsgi
2021-09-23 00:00:00
Debian DLA-2768-1 : uwsgi - LTS security update
2021-10-02 00:00:00
Photon OS 1.0: Httpd PHSA-2021-1.0-0437
2021-10-08 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2768-1)
2021-10-01 00:00:00
Apache HTTP Server 2.4.30 < 2.4.49 DoS Vulnerability - Windows
2021-09-17 00:00:00
Apache HTTP Server 2.4.30 < 2.4.49 DoS Vulnerability - Linux
2021-09-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-36160 affecting package httpd 2.4.46-6
2021-10-15 04:46:31
CVE-2021-36160 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
redhatcve
redhatcve
CVE-2021-36160
2021-09-16 21:58:07
osv
osv
BIT-apache-2021-36160
2024-03-06 10:55:19
CVE-2021-36160
2021-09-16 15:15:07
Moderate: httpd:2.4 security and bug fix update
2022-05-10 08:07:40
prion
prion
Design/Logic Flaw
2021-09-16 15:15:00
ubuntucve
ubuntucve
CVE-2021-36160
2021-09-16 00:00:00
f5
f5
K13401920 : Apache HTTPD vulnerability CVE-2021-36160
2021-10-20 00:00:00
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2021-09-20 05:04:34
alpinelinux
alpinelinux
CVE-2021-36160
2021-09-16 15:15:07
httpd
httpd
Apache Httpd < 2.4.49 : mod_proxy_uwsgi out of bound read
2021-04-26 00:00:00
attackerkb
attackerkb
CVE-2021-40438
2021-09-16 00:00:00
redhat
redhat
(RHSA-2022:1915) Moderate: httpd:2.4 security and bug fix update
2022-05-10 08:07:40
(RHSA-2022:7143) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:05:14
(RHSA-2022:6753) Moderate: httpd24-httpd security and bug fix update
2022-09-29 13:20:41
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0437
2021-10-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-0309
2021-10-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-3.0-0309
2021-10-02 00:00:00
almalinux
almalinux
Moderate: httpd:2.4 security and bug fix update
2022-05-10 08:07:40
oraclelinux
oraclelinux
httpd:2.4 security and bug fix update
2022-05-17 00:00:00
rocky
rocky
httpd:2.4 security and bug fix update
2022-05-10 08:07:40
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.49-alt1
2021-10-04 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.49-alt1
2021-09-23 00:00:00
slackware
slackware
[slackware-security] httpd
2021-09-17 04:22:20
kaspersky
kaspersky
KLA12370 Multiple vulnerabilities in Apache HTTP Server
2021-09-16 00:00:00
ubuntu
ubuntu
Apache HTTP Server regression
2021-09-28 00:00:00
Apache HTTP Server regression
2021-09-28 00:00:00
cisco
cisco
freebsd
freebsd
Apache httpd -- multiple vulnerabilities
2021-09-16 00:00:00
mageia
mageia
Updated apache packages fix security vulnerability
2021-09-23 07:49:29
amazon
amazon
Important: httpd
2021-10-15 07:57:00
Important: httpd24
2021-10-15 07:52:00
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34
2021-09-20 13:58:04
rosalinux
rosalinux
Advisory ROSA-SA-2023-2160
2023-04-25 12:02:31
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00