CVE-2021-44790

🗓️ 20 Dec 2021 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 7102 Views🌐 WEB

A buffer overflow vulnerability in Apache HTTP Server 2.4.51 and earlier

Reporter	Title	Published	Views	Family All 243
0day.today	Apache 2.4.x - Buffer Overflow Exploit	2 Apr 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-44790, CVE-2021-44224)	1 Apr 202210:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge is affected by Apache HTTP Server version used in it. (CVE-2021-44790)	2 Mar 202214:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2021-44790, CVE-2021-44224)	16 Mar 202208:32	–	ibm
IBM Security Bulletins	Security Bulletin: Apache HTTP Server as used by IBM QRadar SIEM is vulnerable to buffer overflow and denial of service (CVE-2021-44790, CVE-2021-34798, CVE-2021-39275)	28 Feb 202217:37	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	2 Jun 202202:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in expat, glibc, http server, dojo, openssl shipped with IBM Cloud Pak System	15 Aug 202221:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server	12 Jan 202219:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in Spring Framework, OpenSSL and Apache HTTP Server shipped with the DS8000 Hardware Management Console (HMC)	3 Feb 202321:20	–	ibm

NVD

Vulners

Node

apache http_serverRange<2.4.52

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

fedoraproject fedoraMatch36

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

tenable tenable.scRange5.16.0–5.20.0

Node

netapp cloud_backupMatch-

Node

oracle communications_element_managerRange≤9.0

oracle communications_operations_monitorMatch4.3

oracle communications_operations_monitorMatch4.4

oracle communications_operations_monitorMatch5.0

oracle communications_session_report_managerRange≤9.0

oracle communications_session_route_managerRange≤9.0

oracle http_serverMatch12.2.1.3.0

oracle http_serverMatch12.2.1.4.0

oracle instantis_enterprisetrackMatch17.1

oracle instantis_enterprisetrackMatch17.2

oracle instantis_enterprisetrackMatch17.3

oracle zfs_storage_appliance_kitMatch8.8

Node

apple mac_os_xMatch10.15.7security_update_2020-001

apple mac_os_xMatch10.15.7security_update_2021-001

apple mac_os_xMatch10.15.7security_update_2021-002

apple mac_os_xMatch10.15.7security_update_2021-003

apple mac_os_xMatch10.15.7security_update_2021-004

apple mac_os_xMatch10.15.7security_update_2021-005

apple mac_os_xMatch10.15.7security_update_2021-006

apple mac_os_xMatch10.15.7security_update_2021-007

apple mac_os_xMatch10.15.7security_update_2021-008

apple mac_os_xMatch10.15.7security_update_2022-001

apple mac_os_xMatch10.15.7security_update_2022-002

apple mac_os_xMatch10.15.7security_update_2022-003

apple macosRange<10.15.7

apple macosRange11.0–11.6.6

apple macosRange12.0–12.4

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache HTTP Server",
    "versions": [
      {
        "version": "Apache HTTP Server 2.4",
        "status": "affected",
        "lessThanOrEqual": "2.4.51",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213256
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/
tenable	www.tenable.com/security/tns-2022-01
support	www.support.apple.com/kb/HT213255
openwall	www.openwall.com/lists/oss-security/2021/12/20/4
tenable	www.tenable.com/security/tns-2022-03
security	www.security.netapp.com/advisory/ntap-20211224-0001/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/
packetstormsecurity	www.packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html
debian	www.debian.org/security/2022/dsa-5035