Vulnerabilityhigh

Apache fixed a couple of severe vulnerabilities in Apache HTTP Server

Security Affairsby @securityaffairsDec 27, 2021 · 18:26 UTC (Dec 27, 2021)1 min read6 · 3 reads

Read at securityaffairs.com

Analyze CVE-2021-44790 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-44790 CVE-2021-44224 CVE-2021-40438

Tags: cve-2021-44790 cve-2021-44224 cve-2021-40438 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40438	Server-Side Request Forgery (SSRF) in Apache HTTP Server mod_proxy	9.0	100%	KEVRansomware	Sep 16, 2021 KEV Dec 1, 2021
CVE-2021-44790 +1 related CVE CVE-2021-44224	A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)	9.8 group max	97%	PoC	Dec 20, 2021

From the original article

1 min read at securityaffairs.com

The Apache Software Foundation released Apache HTTP Server 2. 4. 52 to address a couple of security flaws that can lead to remote code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.