Lucene search
Apache Team FoundationHTTPD:A7133572D328CD65C350E33F20834FADHistoryDec 20, 2021 - 12:00 a.m.
Apache Httpd < 2.4.52 : Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
2021-12-2000:00:00
Apache Team Foundation
httpd.apache.org
117
0.307 Low
EPSS
Percentile
97.0%
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery).
This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
Related
ibm
ibm
osv
osv
CVE-2021-44224
2021-12-20 12:15:07
BIT-apache-2021-44224
2024-03-06 10:54:18
apache2 vulnerabilities
2022-01-10 11:14:47
nessus
nessus
CentOS 9 : mod_http2-1.15.19-4.el9
2024-02-29 00:00:00
Debian DLA-2907-1 : apache2 - LTS security update
2022-02-02 00:00:00
SUSE SLES15 Security Update : apache2 (SUSE-SU-2022:0091-2)
2022-01-21 00:00:00
cve
cve
CVE-2021-44224
2021-12-20 12:15:07
alpinelinux
alpinelinux
CVE-2021-44224
2021-12-20 12:15:07
openvas
openvas
Apache HTTP Server 2.4.7 - 2.4.51 Multiple Vulnerabilities - Linux
2021-12-21 00:00:00
Apache HTTP Server 2.4.7 - 2.4.51 Multiple Vulnerabilities - Windows
2021-12-21 00:00:00
Debian: Security Advisory (DLA-2907-1)
2022-02-02 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-12-21 08:11:59
cbl_mariner
cbl_mariner
CVE-2021-44224 affecting package httpd for versions less than 2.4.52-1
2022-04-09 06:51:57
CVE-2021-44224 affecting package httpd 2.4.51-1
2022-01-10 03:59:19
checkpoint_advisories
checkpoint_advisories
Apache httpd mod_proxy NULL Pointer Dereference (CVE-2021-44224)
2022-11-21 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2021-12-20 12:15:00
cnvd
cnvd
Apache HTTP Server code issue vulnerability
2021-12-24 00:00:00
f5
f5
K16090693 : Apache HTTP server vulnerability CVE-2021-44224
2021-12-27 00:00:00
redhatcve
redhatcve
CVE-2021-44224
2021-12-21 17:04:16
ubuntucve
ubuntucve
CVE-2021-44224
2021-12-20 00:00:00
debiancve
debiancve
CVE-2021-44224
2021-12-20 12:15:07
redos
redos
ROS-20211223-04
2021-12-23 00:00:00
cisa
cisa
Apache Releases Security Update for HTTP Server
2021-12-22 00:00:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2022-01-10 00:00:00
debian
debian
[SECURITY] [DSA 5035-1] apache2 security update
2022-01-04 16:38:55
slackware
slackware
[slackware-security] httpd
2021-12-20 20:00:56
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 1:2.4.52-alt1
2021-12-27 00:00:00
Security fix for the ALT Linux 9 package apache2 version 1:2.4.52-alt1
2022-02-04 00:00:00
amazon
amazon
Important: httpd24
2022-01-18 20:14:00
Important: httpd
2022-01-18 21:37:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-12-20 00:00:00
kaspersky
kaspersky
KLA12400 Multiple vulnerabilities in Apache HTTP Server
2021-12-20 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.52-1.fc35
2021-12-24 01:26:46
fortinet
fortinet
Multiple Apache Vulnerabilities fixed in 2.4.52
2021-12-28 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-12-22 02:27:37
threatpost
threatpost
Critical Apache HTTPD Server Bugs Could Lead to RCE, DoS
2021-12-22 17:59:55
redhat
redhat
(RHSA-2022:1915) Moderate: httpd:2.4 security and bug fix update
2022-05-10 08:07:40
(RHSA-2022:7143) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:05:14
(RHSA-2022:6753) Moderate: httpd24-httpd security and bug fix update
2022-09-29 13:20:41
oraclelinux
oraclelinux
httpd:2.4 security and bug fix update
2022-05-17 00:00:00
rocky
rocky
httpd:2.4 security and bug fix update
2022-05-10 08:07:40
almalinux
almalinux
Moderate: httpd:2.4 security and bug fix update
2022-05-10 08:07:40
rosalinux
rosalinux
Advisory ROSA-SA-2023-2155
2023-04-18 12:09:43
Advisory ROSA-SA-2023-2160
2023-04-25 12:02:31
thn
thn
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
apple
apple
About the security content of Security Update 2022-004 Catalina
2022-05-16 00:00:00
About the security content of macOS Big Sur 11.6.6
2022-05-16 00:00:00
About the security content of macOS Monterey 12.4
2022-05-16 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00