The vulnerability of the Apache HTTP Server’s web server, related to pointer arithmetic errors, allows attackers to cause an unexpected termination of the application.

🗓️ 20 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Apache Web Server vulnerability from pointer arithmetic errors allows remote termination of the application.

Reporter	Title	Published	Views	Family All 180
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-31618, CVE-2020-13950, CVE-2019-17567, CVE-2020-26691, CVE-2021-26690, CVE-2020-13938, CVE-2021-30641, CVE-2020-35452)	29 Apr 202502:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2020-13938, CVE-2021-30641, CVE-2021-26690, CVE-2021-26691)	16 Sep 202106:03	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-26690, CVE-2021-26691)	2 Jul 202113:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server	28 Jun 202115:35	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-26690, CVE-2021-26691)	30 Jul 202105:03	–	ibm
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2021-1659)	24 Jun 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : httpd (ALAS-2021-1674)	1 Jul 202100:00	–	nessus
Tenable Nessus	Amazon Linux AMI : httpd24 (ALAS-2021-1514)	13 Jul 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0017: httpd:2.4 (ALINUX3-SA-2022:0017)	14 May 202500:00	–	nessus

Vulners

Node

apache http_serverRange2.4.0–2.4.46

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell suse_linux_enterprise_serverMatch15-ltss

OR

novell opensuse_leapMatch15.2

OR

novell opensuse_leapMatch15.3

Source	Link
access	www.access.redhat.com/security/cve/cve-2021-26690
debian	www.debian.org/security/2021/dsa-4937
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
suse	www.suse.com/security/cve/CVE-2021-26690.html
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20211126SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti

19 Aug 2025 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.5

CVSS 27.8

EPSS0.65067

Apache Web Server Pointer Arithmetic Remote Termination Application Crash Security Vulnerability