CVE-2021-33193
16.08.2021, 08:15
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| debian | debian_linux | 10.0 |
| apache | http_server | 2.4.17 ≤ 𝑥 < 2.4.49 |
| tenable | tenable.sc | 𝑥 ≤ 5.19.1 |
| oracle | secure_backup | 𝑥 < 18.1.0.1.0 |
| oracle | zfs_storage_appliance_kit | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache2 |
| ||||||||||||||||||||||||||||||||||||||
| apache2-devel |
| ||||||||||||||||||||||||||||||||||||||
| apache2-doc |
| ||||||||||||||||||||||||||||||||||||||
| apache2-example-pages |
| ||||||||||||||||||||||||||||||||||||||
| apache2-prefork |
| ||||||||||||||||||||||||||||||||||||||
| apache2-utils |
| ||||||||||||||||||||||||||||||||||||||
| apache2-worker |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| httpd |
| ||
| httpd-debuginfo |
| ||
| httpd-devel |
| ||
| httpd-filesystem |
| ||
| httpd-manual |
| ||
| httpd-tools |
| ||
| httpd24 |
| ||
| httpd24-debuginfo |
| ||
| httpd24-devel |
| ||
| httpd24-manual |
| ||
| httpd24-tools |
| ||
| mod24_ldap |
| ||
| mod24_md |
| ||
| mod24_proxy_html |
| ||
| mod24_session |
| ||
| mod24_ssl |
| ||
| mod_ldap |
| ||
| mod_md |
| ||
| mod_proxy_html |
| ||
| mod_session |
| ||
| mod_ssl |
|
Azure Linux Releases
References