CVE-2021-44224

Katalog CVE

CVSS 8.2 · High EPSS 82,3%

Kerentanan NULL Pointer Dereference pada apache http server, fedoraproject fedora +10 lainnya. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

Rincian

Terbit di NVD

20 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

82,3% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://httpd.apache.org/security/vulnerabilities_24.html advisory vendor
• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/May/33 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/May/35 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2022/May/38 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/12/20/3 mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202208-20 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20211224-0001/ advisory pihak ketiga
• https://support.apple.com/kb/HT213255 advisory pihak ketiga
• https://support.apple.com/kb/HT213256 advisory pihak ketiga
• https://support.apple.com/kb/HT213257 advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5035 advisory pihak ketiga
• https://www.tenable.com/security/tns-2022-01 advisory pihak ketiga
• https://www.tenable.com/security/tns-2022-03 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SH...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBV...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNW...