Lucene search

CVE-2021-44224

🗓️ 20 Dec 2021 00:00:00Reported by ubuntu.comType

Crafted URI to httpd forward proxy can cause crash or SSRF. Affects Apache HTTP Server 2.4.7 to 2.4.51

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Apache HTTP Server version used in it. (CVE-2021-44224)	17 Jan 202218:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server (powered by Apache) for i is vulnerable to CVE-2021-44224	28 Feb 202223:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server	4 Mar 202219:21	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-44790, CVE-2021-44224)	1 Apr 202212:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by IBM WebSphere Application Server	12 Jan 202219:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HTTP (CVE-2021-33193 and CVE-2021-44224) affects Power HMC	4 Dec 202200:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2021-44790, CVE-2021-44224)	16 Mar 202208:32	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-44790, CVE-2021-44224)	1 Apr 202210:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by multiple Apache HTTP Server Vulnerabilities	2 Jun 202202:42	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm

Source	Link
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
ubuntu	www.ubuntu.com/security/notices/USN-5212-1
ubuntu	www.ubuntu.com/security/notices/USN-5212-2
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-44224
launchpad	www.launchpad.net/bugs/cve/CVE-2021-44224
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-44224

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	apache2	2.4.29-1ubuntu4.21	UNKNOWN
ubuntu	20.04	noarch	apache2	2.4.41-4ubuntu3.9	UNKNOWN
ubuntu	21.04	noarch	apache2	2.4.46-4ubuntu1.5	UNKNOWN
ubuntu	21.10	noarch	apache2	2.4.48-3.1ubuntu3.2	UNKNOWN
ubuntu	22.04	noarch	apache2	2.4.52-1ubuntu1	UNKNOWN
ubuntu	14.04	noarch	apache2	2.4.7-1ubuntu4.22+esm3	UNKNOWN
ubuntu	16.04	noarch	apache2	2.4.18-2ubuntu3.17+esm4	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Dec 2021 00:00Current

1.2Low risk

Vulners AI Score1.2

CVSS26.4

CVSS38.2

EPSS0.205