PhotonPHSA-2021-1.0-0437

HistoryOct 01, 2021 - 12:00 a.m.

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0437

2021-10-0100:00:00

github.com

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

An update of {‘httpd’, ‘atftp’} packages of Photon OS has been released.

OSVersionArchitecturePackageVersionFilename
Photon1.0x86_64atftp< 0.7.1-11.ph1atftp-0.7.1-11.ph1.x86_64.rpm
Photon1.0x86_64atftp-client< 0.7.1-11.ph1atftp-client-0.7.1-11.ph1.x86_64.rpm
Photon1.0x86_64httpd< 2.4.48-3.ph1httpd-2.4.48-3.ph1.x86_64.rpm
Photon1.0x86_64httpd-devel< 2.4.48-3.ph1httpd-devel-2.4.48-3.ph1.x86_64.rpm
Photon1.0x86_64httpd-docs< 2.4.48-3.ph1httpd-docs-2.4.48-3.ph1.x86_64.rpm
Photon1.0x86_64httpd-tools< 2.4.48-3.ph1httpd-tools-2.4.48-3.ph1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
Photon	1.0	x86_64	atftp	< 0.7.1-11.ph1	atftp-0.7.1-11.ph1.x86_64.rpm
Photon	1.0	x86_64	atftp-client	< 0.7.1-11.ph1	atftp-client-0.7.1-11.ph1.x86_64.rpm
Photon	1.0	x86_64	httpd	< 2.4.48-3.ph1	httpd-2.4.48-3.ph1.x86_64.rpm
Photon	1.0	x86_64	httpd-devel	< 2.4.48-3.ph1	httpd-devel-2.4.48-3.ph1.x86_64.rpm
Photon	1.0	x86_64	httpd-docs	< 2.4.48-3.ph1	httpd-docs-2.4.48-3.ph1.x86_64.rpm
Photon	1.0	x86_64	httpd-tools	< 2.4.48-3.ph1	httpd-tools-2.4.48-3.ph1.x86_64.rpm

photon 8

nessus 60

debian 5

suse 2

osv 17

ibm 17

attackerkb 1

altlinux 2

mageia 1

freebsd 1

ubuntu 4

cisco 1

kaspersky 1

slackware 1

ics 1

debiancve 4

cve 4

amazon 2

prion 4

veracode 4

ubuntucve 4

cbl_mariner 7

cnvd 3

redhatcve 3

f5 3

alpinelinux 3

httpd 3

redhat 7

cisa_kev 1

oraclelinux 5

githubexploit 7

centos 1

checkpoint_advisories 1

rocky 3

hackerone 1

almalinux 2

nuclei 1

rapid7blog 1

fedora 2

rosalinux 1

photon

Critical Photon OS Security Update - PHSA-2021-0437

2021-10-01 00:00:00

Critical Photon OS Security Update - PHSA-2021-0309

2021-10-01 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0399

2021-10-01 00:00:00

nessus

Photon OS 2.0: Httpd PHSA-2021-2.0-0399

2021-10-08 00:00:00

Photon OS 3.0: Httpd PHSA-2021-3.0-0309

2021-10-08 00:00:00

Photon OS 1.0: Httpd PHSA-2021-1.0-0437

2021-10-08 00:00:00

debian

[SECURITY] [DSA 4982-1] apache2 security update

2021-10-08 20:56:04

[SECURITY] [DLA 2776-1] apache2 security update

2021-10-02 16:07:56

[SECURITY] [DLA 2768-2] uwsgi regression update

2021-10-20 18:04:40

suse

Security update for apache2 (important)

2021-11-02 00:00:00

Security update for apache2 (important)

2021-10-26 00:00:00

osv

apache2 - security update

2021-10-08 00:00:00

apache2 regression

2021-09-28 13:28:37

apache2 regression

2021-09-28 15:05:47

ibm

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-40438, CVE-2021-34798)

2021-10-18 06:27:04

Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server

2021-11-11 19:48:54

Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with WebSphere Remote Server (CVE-2021-40438, CVE-2021-34798)

2021-12-17 16:40:29

attackerkb

CVE-2021-40438

2021-09-16 00:00:00

altlinux

Security fix for the ALT Linux 9 package apache2 version 1:2.4.49-alt1

2021-09-23 00:00:00

Security fix for the ALT Linux 10 package apache2 version 1:2.4.49-alt1

2021-10-04 00:00:00

mageia

Updated apache packages fix security vulnerability

2021-09-23 07:49:29

freebsd

Apache httpd -- multiple vulnerabilities

2021-09-16 00:00:00

ubuntu

Apache HTTP Server regression

2021-09-28 00:00:00

Apache HTTP Server regression

2021-09-28 00:00:00

Apache HTTP Server vulnerabilities

2021-09-27 00:00:00

cisco

Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021

2021-11-24 16:00:00

kaspersky

KLA12370 Multiple vulnerabilities in Apache HTTP Server

2021-09-16 00:00:00

slackware

[slackware-security] httpd

2021-09-17 04:22:20

ics

Siemens Apache HTTP Server (Update A)

2022-10-13 12:00:00

debiancve

CVE-2021-41054

2021-09-13 21:15:00

CVE-2021-36160

2021-09-16 15:15:00

CVE-2021-34798

2021-09-16 15:15:00

cve

CVE-2021-41054

2021-09-13 21:15:00

CVE-2021-36160

2021-09-16 15:15:00

CVE-2021-34798

2021-09-16 15:15:00

amazon

Important: httpd24

2021-10-15 07:52:00

Important: httpd

2021-10-15 07:57:00

prion

Buffer overflow

2021-09-13 21:15:00

Design/Logic Flaw

2021-09-16 15:15:00

Null pointer dereference

2021-09-16 15:15:00

veracode

Denial Of Service (DoS)

2021-09-22 21:29:30

Denial Of Service (DoS)

2021-09-20 05:04:34

Denial Of Service (DoS)

2021-09-19 21:02:16

ubuntucve

CVE-2021-41054

2021-09-13 00:00:00

CVE-2021-36160

2021-09-16 00:00:00

CVE-2021-34798

2021-09-16 00:00:00

cbl_mariner

CVE-2021-41054 affecting package atftp 0.7.2-3

2021-11-03 19:21:13

CVE-2021-36160 affecting package httpd 2.4.46-6

2021-10-15 04:46:31

CVE-2021-36160 affecting package httpd 2.4.46-10

2022-04-09 06:51:57

cnvd

Apache HTTP Server Denial of Service Vulnerability (CNVD-2022-03205)

2021-09-18 00:00:00

Apache HTTP Server code issue vulnerability

2021-09-22 00:00:00

Apache HTTP Server mod_proxy server-side request forgery vulnerability

2021-09-18 00:00:00

redhatcve

CVE-2021-36160

2021-09-16 21:58:07

CVE-2021-34798

2021-09-16 21:57:58

CVE-2021-40438

2021-09-16 20:45:58

K13401920 : Apache HTTPD vulnerability CVE-2021-36160

2021-10-20 00:00:00

K72382141 : Apache HTTPD vulnerability CVE-2021-34798

2021-10-13 00:00:00

K01552024 : Apache vulnerability CVE-2021-40438

2021-10-21 00:00:00

alpinelinux

CVE-2021-36160

2021-09-16 15:15:00

CVE-2021-34798

2021-09-16 15:15:00

CVE-2021-40438

2021-09-16 15:15:00

httpd

Apache Httpd < 2.4.49 : mod_proxy_uwsgi out of bound read

2021-04-26 00:00:00

Apache Httpd < 2.4.49 : NULL pointer dereference in httpd core

2021-09-16 00:00:00

Apache Httpd < 2.4.49 : mod_proxy SSRF

2021-09-16 00:00:00

redhat

(RHSA-2021:3746) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update

2021-10-07 13:31:45

(RHSA-2021:3836) Important: httpd:2.4 security update

2021-10-13 07:08:32

(RHSA-2021:3856) Important: httpd security update

2021-10-14 08:00:40

cisa_kev

Apache HTTP Server-Side Request Forgery (SSRF)

2021-12-01 00:00:00

oraclelinux

httpd security update

2021-10-14 00:00:00

httpd:2.4 security update

2022-03-16 00:00:00

httpd security update

2021-12-16 00:00:00

githubexploit

Exploit for Server-Side Request Forgery in Apache Http Server

2023-12-12 11:56:23

Exploit for Server-Side Request Forgery in Apache Http Server

2022-04-03 15:24:24

Exploit for Server-Side Request Forgery in Apache Http Server

2021-10-18 02:02:43

centos

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

2021-11-17 14:59:00

checkpoint_advisories

Apache HTTP Server Server-Side Request Forgery (CVE-2021-40438)

2021-10-18 00:00:00

rocky

2.4 bug fix update

2021-11-10 09:00:43

httpd:2.4 security update

2022-03-15 09:10:44

httpd:2.4 security update

2021-10-12 15:53:03

hackerone

Acronis: CVE-2021-40438 on cp-eu2.acronis.com

2021-10-15 05:46:15

almalinux

httpd:2.4 bug fix update

2021-11-10 09:00:43

Moderate: httpd:2.4 security update

2022-03-15 09:10:44

nuclei

Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery

2021-10-14 19:59:52

rapid7blog

Active Exploitation of Apache HTTP Server CVE-2021-40438

2021-11-30 17:38:53

fedora

[SECURITY] Fedora 35 Update: httpd-2.4.49-1.fc35

2021-09-24 20:56:12

[SECURITY] Fedora 34 Update: httpd-2.4.49-1.fc34

2021-09-20 13:58:04

rosalinux

Advisory ROSA-SA-2023-2158

2023-04-25 11:30:17

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

Related for PHSA-2021-1.0-0437