In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow (CVE-2021-26691)

Impact

There is no impact; F5 products are not affected by this vulnerability.

CPENameOperatorVersion
f5 ssl orchestratoreq14.1.0
f5 ssl orchestratoreq14.1.2
f5 ssl orchestratoreq14.1.4
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq15.1.1
f5 ssl orchestratoreq16.1.0
f5 ssl orchestratoreq16.1.1
big-ip afmeq11.6.1
big-ip afmeq11.6.2
big-ip afmeq11.6.3

Name	Operator	Version
f5 ssl orchestrator	eq	14.1.0
f5 ssl orchestrator	eq	14.1.2
f5 ssl orchestrator	eq	14.1.4
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	15.1.1
f5 ssl orchestrator	eq	16.1.0
f5 ssl orchestrator	eq	16.1.1
big-ip afm	eq	11.6.1
big-ip afm	eq	11.6.2
big-ip afm	eq	11.6.3

Rows per page:

1-10 of 2761

altlinux 2

cbl_mariner 2

nessus 55

veracode 1

cve 2

prion 2

osv 10

alpinelinux 1

httpd 1

redhatcve 2

debiancve 2

ubuntucve 2

openvas 29

ibm 7

almalinux 2

oraclelinux 2

rocky 2

redhat 5

centos 1

ubuntu 2

debian 2

photon 3

suse 2

gentoo 1

rosalinux 2

amazon 3

slackware 1

mageia 1

kaspersky 1

ics 1

freebsd 1

fedora 2

oracle 3

altlinux

Security fix for the ALT Linux 9 package apache2 version 1:2.4.48-alt3.1

2021-07-22 00:00:00

Security fix for the ALT Linux 10 package apache2 version 1:2.4.48-alt3.1

2021-07-22 00:00:00

cbl_mariner

CVE-2021-26691 affecting package httpd 2.4.46-10

2022-04-09 06:51:57

CVE-2021-26691 affecting package httpd 2.4.46-6

2021-07-08 21:56:40

nessus

CBL Mariner 2.0 Security Update: httpd (CVE-2021-26691)

2023-03-20 00:00:00

EulerOS 2.0 SP5 : httpd (EulerOS-SA-2021-2500)

2021-09-27 00:00:00

Oracle Linux 8 : httpd:2.4 (ELSA-2021-3816)

2021-10-14 00:00:00

veracode

Denial Of Service (DoS)

2021-06-13 03:24:47

cve

CVE-2021-26691

2021-06-10 07:15:00

CVE-2021-20325

2022-02-18 18:15:00

prion

Heap overflow

2021-06-10 07:15:00

Design/Logic Flaw

2022-02-18 18:15:00

osv

CVE-2021-26691

2021-06-10 07:15:07

BIT-apache-2021-26691

2024-03-06 10:56:15

Important: httpd:2.4 security update

2021-10-12 15:53:03

alpinelinux

CVE-2021-26691

2021-06-10 07:15:00

httpd

Apache Httpd < 2.4.48 : mod_session response handling heap overflow

2021-03-01 00:00:00

redhatcve

CVE-2021-26691

2021-06-08 03:17:19

CVE-2021-20325

2021-11-09 09:06:32

debiancve

CVE-2021-26691

2021-06-10 07:15:00

CVE-2021-20325

2022-02-18 18:15:00

ubuntucve

CVE-2021-26691

2021-06-10 00:00:00

CVE-2021-20325

2022-02-18 00:00:00

openvas

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2500)

2021-09-28 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2463)

2021-09-24 00:00:00

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2021-2586)

2021-10-26 00:00:00

ibm

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-26690, CVE-2021-26691)

2021-07-02 13:49:24

2021-07-30 05:03:18

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server

2021-06-28 15:35:13

almalinux

Important: httpd:2.4 security update

2021-10-12 15:53:03

Important: httpd:2.4 security update

2021-11-09 19:25:44

oraclelinux

httpd:2.4 security update

2021-10-13 00:00:00

httpd security update

2022-01-18 00:00:00

rocky

httpd:2.4 security update

2021-10-12 15:53:03

httpd:2.4 security update

2021-11-09 19:25:44

redhat

(RHSA-2021:3816) Important: httpd:2.4 security update

2021-10-12 15:53:03

(RHSA-2021:4537) Important: httpd:2.4 security update

2021-11-09 19:25:44

(RHSA-2022:0143) Important: httpd security update

2022-01-17 08:16:34

centos

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

2022-01-25 17:31:14

ubuntu

Apache HTTP Server vulnerabilities

2021-06-21 00:00:00

Apache HTTP Server vulnerabilities

2021-06-21 00:00:00

debian

[SECURITY] [DSA 4937-1] apache2 security update

2021-07-08 17:14:14

[SECURITY] [DLA 2706-1] apache2 security update

2021-07-09 08:50:21

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0365

2021-06-30 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0409

2021-07-01 00:00:00

Critical Photon OS Security Update - PHSA-2021-0409

2021-07-01 00:00:00

suse

Security update for apache2 (important)

2021-07-10 00:00:00

Security update for apache2 (important)

2021-06-24 00:00:00

gentoo

Apache: Multiple vulnerabilities

2021-07-17 00:00:00

rosalinux

Advisory ROSA-SA-2023-2158

2023-04-25 11:30:17

Advisory ROSA-SA-2023-2159

2023-04-25 11:49:15

amazon

Medium: httpd24

2021-07-08 18:38:00

Medium: httpd

2021-07-01 00:59:00

Important: httpd

2021-06-16 20:37:00

slackware

[slackware-security] httpd

2021-06-07 19:07:12

mageia

Updated apache packages fix security vulnerabilities

2021-06-16 23:22:25

kaspersky

KLA12369 Multiple vulnerabilities in Apache HTTP Server

2021-06-01 00:00:00

ics

Mitsubishi Electric MELSOFT iQ AppPortal

2022-05-12 12:00:00

freebsd

Apache httpd -- Multiple vulnerabilities

2021-06-09 00:00:00

fedora

[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35

2021-09-24 20:56:12

[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34

2021-09-20 13:58:04

oracle

Oracle Critical Patch Update Advisory - October 2022

2022-10-18 00:00:00

Oracle Critical Patch Update Advisory - October 2021

2021-10-19 00:00:00

Oracle Critical Patch Update Advisory - January 2022

2022-01-18 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.77 High

EPSS

Percentile

97.9%

JSON

Related for F5:K32305110