CVE-2021-44790: apache software foundation apache http server Out-of-bounds Write

CVSS: 9.8v3.1CriticalAnalyzed

AliasesALPINE-CVE-2021-44790RHSA-2022:0258RHSA-2022:0288+3 more

Published 20-12-2021Last modified 04-08-2024

Vulnerability summary

CVE-2021-44790 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in apache software foundation apache http server. EPSS estimates a 96.84% chance of exploitation in the next 30 days, higher than 99.8% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (NVD)

EPSS score

96.84%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 18 · Related 10

DLA-2907-1 DSA-5035-1 MGASA-2021-0577 OPENSUSE-SU-2022:0091-1 OPENSUSE-SU-2024:11695-1 RHSA-2022:0143+12 more

Timeline

20-12-2021
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.19.8v2.07.5

EPSS trend

Probability

96.84%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 96.84% on 18-09-2026

18-09-202618-10-2026

EPSS score

96.84%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
exploit-databasemultipleVerified
Apache 2.4.x - Buffer Overflow
Maturity: poc

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Redhat31 products

httpd< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-debuginfo< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-debugsource< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-devel< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-filesystem< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3

httpd-manual< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-tools< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd-tools-debuginfo< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
httpd24-httpd< 0:2.4.34-23.el7.1
httpd24-httpd-debuginfo< 0:2.4.34-23.el7.1
httpd24-httpd-devel< 0:2.4.34-23.el7.1
httpd24-httpd-manual< 0:2.4.34-23.el7.1
httpd24-httpd-tools< 0:2.4.34-23.el7.1
httpd24-mod_ldap< 0:2.4.34-23.el7.1
httpd24-mod_proxy_html< 1:2.4.34-23.el7.1
httpd24-mod_session< 0:2.4.34-23.el7.1
httpd24-mod_ssl< 1:2.4.34-23.el7.1
mod_http2< 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1 | < 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
mod_http2-debuginfo< 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1 | < 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
mod_http2-debugsource< 0:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1 | < 0:1.15.7-3.module+el8.4.0+8625+d397f3da | < 0:1.11.3-3.module+el8.1.0+7763+babdfe5b.1
mod_ldap< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_ldap-debuginfo< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_md< 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2 | < 1:2.0.8-8.module+el8.3.0+6814+67d1e611 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_md-debuginfo< 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2 | < 1:2.0.8-8.module+el8.3.0+6814+67d1e611 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_md-debugsource< 1:2.0.8-7.module+el8.2.0+5531+7e4d69a2 | < 1:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_proxy_html< 1:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_proxy_html-debuginfo< 1:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_session< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_session-debuginfo< 0:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 0:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 0:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 0:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_ssl< 1:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 1:2.4.37-16.module+el8.1.0+13809+822d170a.3
mod_ssl-debuginfo< 1:2.4.37-21.module+el8.2.0+13808+dea277df.3 | < 1:2.4.37-39.module+el8.4.0+13807+c8c001ae.3 | < 1:2.4.37-43.module+el8.5.0+13806+b30d9eec.1 | < 1:2.4.37-16.module+el8.1.0+13809+822d170a.3

Show all 31

Oracle7 products

communications_element_manager≤ 9.0
communications_operations_monitor4.3 | 4.4 | 5.0
communications_session_report_manager≤ 9.0
communications_session_route_manager≤ 9.0
http_server12.2.1.3.0 | 12.2.1.4.0

Show all 7

Apple2 products

mac_os_x10.15.7:security_update_2020-001 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-004 | 10.15.7:security_update_2021-005 | 10.15.7:security_update_2021-006 | 10.15.7:security_update_2021-007 | 10.15.7:security_update_2021-008 | 10.15.7:security_update_2022-001 | 10.15.7:security_update_2022-002 | 10.15.7:security_update_2022-003
macos< 10.15.7 | ≥ 11.0, < 11.6.6 | ≥ 12.0, < 12.4

Debian2 products

apache2< 2.4.52-1
debian_linuxEOL10.0 | 11.0

Alpine1 product

apache2< 2.4.52-r0

Apache1 product

http_server< 2.4.52

Apache software foundation1 product

apache http server≥ Apache HTTP Server 2.4, ≤ 2.4.51

Fedoraproject1 product

fedoraEOL34 | 35 | 36

Netapp1 product

cloud_backupna

Tenable1 product

tenable.sc≥ 5.16.0, < 5.20.0

Ubuntu1 product

apache2< 2.4.7-1ubuntu4.22+esm3 | < 2.4.18-2ubuntu3.17+esm4 | < 2.4.29-1ubuntu4.21 | < 2.4.41-4ubuntu3.9 | < 2.4.52-1ubuntu1

11 vendors · 49 products

References

37 links

httpd.apache.org/security/vulnerabilities_24.htmlARTICLEVendor Advisory
www.openwall.com/lists/oss-security/2021/12/20/4Mailing ListThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party Advisory
www.debian.org/security/2022/dsa-5035Vendor AdvisoryThird Party Advisory
www.oracle.com/security-alerts/cpujan2022.htmlPatchThird Party Advisory
security.netapp.com/advisory/ntap-20211224-0001/Third Party Advisory
www.tenable.com/security/tns-2022-01Third Party Advisory
www.tenable.com/security/tns-2022-03Third Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party Advisory

Show all 37 references

lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party Advisory
www.oracle.com/security-alerts/cpuapr2022.htmlPatchThird Party Advisory
support.apple.com/kb/HT213257Third Party Advisory
support.apple.com/kb/HT213256Third Party Advisory
support.apple.com/kb/HT213255Third Party Advisory
seclists.org/fulldisclosure/2022/May/33Mailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/May/35Mailing ListThird Party Advisory
seclists.org/fulldisclosure/2022/May/38Mailing ListThird Party Advisory
security.gentoo.org/glsa/202208-20Vendor AdvisoryThird Party Advisory
packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.htmlExploit
security.alpinelinux.org/vuln/CVE-2021-44790Advisory
access.redhat.com/errata/RHSA-2022:0258Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2034674REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0258.jsonAdvisory
access.redhat.com/security/cve/CVE-2021-44790REPORT
www.cve.org/CVERecord?id=CVE-2021-44790AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2021-44790AdvisoryOval
access.redhat.com/errata/RHSA-2022:0288Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0288.jsonAdvisory
access.redhat.com/errata/RHSA-2022:0303Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0303.jsonAdvisory
ubuntu.com/security/CVE-2021-44790REPORT
httpd.apache.org/security/vulnerabilities_24.htmlREPORT
ubuntu.com/security/notices/USN-5212-1Advisory
ubuntu.com/security/notices/USN-5212-2Advisory
security-tracker.debian.org/tracker/CVE-2021-44790Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities