CVE-2021-34798: apache http server +17 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2021-34798

CVSS 7.5 · High EPSS 64,5%

Kerentanan NULL Pointer Dereference pada apache http server, fedoraproject fedora +16 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

Rincian

Terbit di NVD: 16 September 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-476: NULL Pointer Dereference
EPSS (30 hari): 64,5% peluang dieksploitasi; lebih tinggi dari 99,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apache	http server	Semua versi hingga 2.4.48
fedoraproject	fedora	Versi 34
fedoraproject	fedora	Versi 35
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0
debian	debian linux	Versi 11.0
netapp	cloud backup	Semua versi
netapp	clustered data ontap	Semua versi
netapp	storagegrid	Semua versi
tenable	tenable.sc	Semua versi hingga 5.19.1
oracle	communications cloud native core network function cloud native environment	Versi 1.10.0
oracle	enterprise manager base platform	Versi 13.4.0.0
oracle	enterprise manager base platform	Versi 13.5.0.0
oracle	http server	Versi 12.2.1.3.0
oracle	http server	Versi 12.2.1.4.0
oracle	instantis enterprisetrack	Versi 17.1
oracle	instantis enterprisetrack	Versi 17.2
oracle	instantis enterprisetrack	Versi 17.3
oracle	peoplesoft enterprise peopletools	Versi 8.58
oracle	zfs storage appliance kit	Versi 8.8
broadcom	brocade fabric operating system firmware	Semua versi
siemens	ruggedcom nms	Semua versi
siemens	sinec nms	Semua versi
siemens	sinema remote connect server	Semua versi sebelum 3.1
siemens	sinema server	Versi 14.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://httpd.apache.org/security/vulnerabilities_24.html release notes · advisory vendor
https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
https://kc.mcafee.com/corporate/index?page=content&id=SB10379 advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html mailing list · advisory pihak ketiga
https://security.gentoo.org/glsa/202208-20 advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20211008-0004/ advisory pihak ketiga
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ advisory pihak ketiga
https://www.debian.org/security/2021/dsa-4982 advisory pihak ketiga
https://www.tenable.com/security/tns-2021-17 advisory pihak ketiga
https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.http...
https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.http...
https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.http...
https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.http...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNAC...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36F...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.