Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-26691HistoryJun 10, 2021 - 7:15 a.m.
CVE-2021-26691
2021-06-1007:15:00
Debian Security Bug Tracker
security-tracker.debian.org
18
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.689 Medium
EPSS
Percentile
98.0%
In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 11 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 10 | all | apache2 | < 2.4.38-3+deb10u5 | apache2_2.4.38-3+deb10u5_all.deb |
| Debian | 999 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
| Debian | 13 | all | apache2 | < 2.4.46-6 | apache2_2.4.46-6_all.deb |
Related
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2021-26691)
2023-03-20 00:00:00
EulerOS 2.0 SP5 : httpd (EulerOS-SA-2021-2500)
2021-09-27 00:00:00
CentOS 8 : httpd:2.4 (CESA-2021:3816)
2021-10-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-06-13 03:24:47
cve
cve
CVE-2021-26691
2021-06-10 07:15:00
CVE-2021-20325
2022-02-18 18:15:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.48-alt3.1
2021-07-22 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.48-alt3.1
2021-07-22 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-26691 affecting package httpd 2.4.46-6
2021-07-08 21:56:40
CVE-2021-26691 affecting package httpd 2.4.46-10
2022-04-09 06:51:57
f5
f5
K32305110 : mod_session vulnerability CVE-2021-26691
2022-04-15 00:00:00
osv
osv
BIT-apache-2021-26691
2024-03-06 10:56:15
CVE-2021-26691
2021-06-10 07:15:07
Important: httpd:2.4 security update
2021-10-12 15:53:03
prion
prion
Heap overflow
2021-06-10 07:15:00
Design/Logic Flaw
2022-02-18 18:15:00
ubuntucve
ubuntucve
CVE-2021-26691
2021-06-10 00:00:00
CVE-2021-20325
2022-02-18 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2500)
2021-09-28 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2463)
2021-09-24 00:00:00
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2381)
2021-09-15 00:00:00
httpd
httpd
Apache Httpd < 2.4.48 : mod_session response handling heap overflow
2021-03-01 00:00:00
alpinelinux
alpinelinux
CVE-2021-26691
2021-06-10 07:15:00
redhatcve
redhatcve
CVE-2021-26691
2021-06-08 03:17:19
CVE-2021-20325
2021-11-09 09:06:32
oraclelinux
oraclelinux
httpd:2.4 security update
2021-10-13 00:00:00
httpd security update
2022-01-18 00:00:00
almalinux
almalinux
Important: httpd:2.4 security update
2021-10-12 15:53:03
Important: httpd:2.4 security update
2021-11-09 19:25:44
redhat
redhat
(RHSA-2021:3816) Important: httpd:2.4 security update
2021-10-12 15:53:03
(RHSA-2021:4537) Important: httpd:2.4 security update
2021-11-09 19:25:44
(RHSA-2022:0143) Important: httpd security update
2022-01-17 08:16:34
rocky
rocky
httpd:2.4 security update
2021-10-12 15:53:03
httpd:2.4 security update
2021-11-09 19:25:44
debiancve
debiancve
CVE-2021-20325
2022-02-18 18:15:00
centos
centos
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2022-01-25 17:31:14
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2021-06-21 00:00:00
Apache HTTP Server vulnerabilities
2021-06-21 00:00:00
debian
debian
[SECURITY] [DSA 4937-1] apache2 security update
2021-07-08 17:14:14
[SECURITY] [DLA 2706-1] apache2 security update
2021-07-09 08:50:21
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0365
2021-06-30 00:00:00
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0409
2021-07-01 00:00:00
Critical Photon OS Security Update - PHSA-2021-0409
2021-07-01 00:00:00
suse
suse
Security update for apache2 (important)
2021-07-10 00:00:00
Security update for apache2 (important)
2021-06-24 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-06-16 23:22:25
gentoo
gentoo
Apache: Multiple vulnerabilities
2021-07-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2158
2023-04-25 11:30:17
Advisory ROSA-SA-2023-2159
2023-04-25 11:49:15
slackware
slackware
[slackware-security] httpd
2021-06-07 19:07:12
amazon
amazon
Medium: httpd24
2021-07-08 18:38:00
Medium: httpd
2021-07-01 00:59:00
Important: httpd
2021-06-16 20:37:00
kaspersky
kaspersky
KLA12369 Multiple vulnerabilities in Apache HTTP Server
2021-06-01 00:00:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-06-09 00:00:00
ics
ics
Mitsubishi Electric MELSOFT iQ AppPortal
2022-05-12 12:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34
2021-09-20 13:58:04
[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35
2021-09-24 20:56:12
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.689 Medium
EPSS
Percentile
98.0%
Related for DEBIANCVE:CVE-2021-26691