Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-26691

Fixed in a distro release EPSS 68%

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

Published 2021-06-10 · CVE record · OSV

Products: Apache Software Foundation Apache HTTP Server

Distro releases

ReleasePackageFixed in
AlmaLinux:8httpd2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8httpd-devel2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8httpd-filesystem2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8httpd-manual2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8httpd-tools2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8mod_http21.15.7-3.module_el8.5.0+2609+b30d9eec
AlmaLinux:8mod_ldap2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8mod_md1:2.0.8-8.module_el8.5.0+2609+b30d9eec
AlmaLinux:8mod_md1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
AlmaLinux:8mod_proxy_html1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8mod_session2.4.37-43.module_el8.5.0+2597+c4b14997.alma
AlmaLinux:8mod_ssl1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma
Alpine:v3.10apache22.4.48-r0
Alpine:v3.11apache22.4.48-r0
Alpine:v3.12apache22.4.48-r0
Alpine:v3.13apache22.4.48-r0
Alpine:v3.14apache22.4.48-r0
Alpine:v3.15apache22.4.48-r0
Alpine:v3.16apache22.4.48-r0
Alpine:v3.17apache22.4.48-r0
Alpine:v3.18apache22.4.48-r0
Alpine:v3.19apache22.4.48-r0
Alpine:v3.20apache22.4.48-r0
Alpine:v3.21apache22.4.48-r0
Alpine:v3.22apache22.4.48-r0
Alpine:v3.23apache22.4.48-r0
Alpine:v3.24apache22.4.48-r0
Debian:10apache22.4.38-3+deb10u5
Debian:12apache22.4.46-6
Debian:13apache22.4.46-6
Debian:14apache22.4.46-6
Debian:9apache22.4.25-3+deb9u10
Red Hat:enterprise_linux:7httpd0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7httpd-debuginfo0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7httpd-devel0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7httpd-manual0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7httpd-tools0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7mod_ldap0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7mod_proxy_html1:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7mod_session0:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:7mod_ssl1:2.4.6-97.el7_9.4
Red Hat:enterprise_linux:8httpd0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-debuginfo0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-debugsource0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-devel0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-filesystem0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-manual0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-tools0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8httpd-tools-debuginfo0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_http20:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat:enterprise_linux:8mod_http2-debuginfo0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat:enterprise_linux:8mod_http2-debugsource0:1.15.7-3.module+el8.4.0+8625+d397f3da
Red Hat:enterprise_linux:8mod_ldap0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_ldap-debuginfo0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_md1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_md-debuginfo1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_md-debugsource1:2.0.8-8.module+el8.3.0+6814+67d1e611
Red Hat:enterprise_linux:8mod_proxy_html1:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_proxy_html-debuginfo1:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_session0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_session-debuginfo0:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_ssl1:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:enterprise_linux:8mod_ssl-debuginfo1:2.4.37-39.module+el8.4.0+12865+a7065a39.1
Red Hat:jboss_core_services:1jbcs-httpd24-apr0:1.6.3-107.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr0:1.6.3-107.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-debuginfo0:1.6.3-107.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-debuginfo0:1.6.3-107.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-devel0:1.6.3-107.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-devel0:1.6.3-107.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-debuginfo0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-devel0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-devel0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-ldap0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-ldap0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-ldap-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-mysql0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-mysql0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-mysql-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-nss0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-nss0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-nss-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-odbc0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-odbc0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-odbc-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-openssl0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-openssl0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-openssl-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-pgsql0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-pgsql0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-pgsql-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-sqlite0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-sqlite0:1.6.1-84.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-apr-util-sqlite-debuginfo0:1.6.1-84.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.78.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl0:7.78.0-2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.78.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-curl-debuginfo0:7.78.0-2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-debuginfo0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-devel0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-manual0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-selinux0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-httpd-tools-debuginfo0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.78.0-2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl0:7.78.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-debuginfo0:7.78.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.78.0-2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-libcurl-devel0:7.78.0-2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native0:1.3.16-9.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native0:1.3.16-9.Final_redhat_2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native-debuginfo0:1.3.16-9.Final_redhat_2.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_cluster-native-debuginfo0:1.3.16-9.Final_redhat_2.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.7-21.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http20:1.15.7-21.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.7-21.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_http2-debuginfo0:1.15.7-21.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.48-20.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk0:1.2.48-20.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.48-20.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap240:1.2.48-20.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-ap24-debuginfo0:1.2.48-20.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-debuginfo0:1.2.48-20.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-manual0:1.2.48-20.redhat_1.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_jk-manual0:1.2.48-20.redhat_1.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ldap-debuginfo0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md1:2.0.8-40.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md1:2.0.8-40.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md-debuginfo1:2.0.8-40.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_md-debuginfo1:2.0.8-40.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html1:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_proxy_html-debuginfo1:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security0:2.9.2-67.GA.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security0:2.9.2-67.GA.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security-debuginfo0:2.9.2-67.GA.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_security-debuginfo0:2.9.2-67.GA.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session0:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_session-debuginfo0:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl1:2.4.37-78.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-mod_ssl-debuginfo1:2.4.37-78.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp20:1.39.2-39.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp20:1.39.2-39.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-debuginfo0:1.39.2-39.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-debuginfo0:1.39.2-39.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-devel0:1.39.2-39.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-nghttp2-devel0:1.39.2-39.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl1:1.1.1g-8.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-chil0:1.0.0-7.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-chil0:1.0.0-7.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-chil-debuginfo0:1.0.0-7.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-chil-debuginfo0:1.0.0-7.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-debuginfo1:1.1.1g-8.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-devel1:1.1.1g-8.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs1:1.1.1g-8.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-libs-debuginfo1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-perl1:1.1.1g-8.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-pkcs110:0.4.10-22.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-pkcs110:0.4.10-22.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-pkcs11-debuginfo0:0.4.10-22.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-pkcs11-debuginfo0:0.4.10-22.jbcs.el7
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1g-8.el8jbcs
Red Hat:jboss_core_services:1jbcs-httpd24-openssl-static1:1.1.1g-8.jbcs.el7
Rocky Linux:8httpd0:2.4.37-39.module+el8.4.0+571+fd70afb1
Rocky Linux:8mod_http20:1.15.7-3.module+el8.4.0+553+7a69454b
Rocky Linux:8mod_http20:1.15.7-3.module+el8.5.0+695+1fa8055e
Rocky Linux:8mod_md1:2.0.8-8.module+el8.5.0+695+1fa8055e
Rocky Linux:8mod_md1:2.0.8-8.module+el8.4.0+553+7a69454b
SUSE:Enterprise Storage 6apache22.4.33-3.50.1
SUSE:HPE Helion OpenStack 8apache22.4.23-29.74.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSapache22.4.33-3.50.1
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache22.4.33-3.50.1
SUSE:Linux Enterprise High Performance Computing 15-ESPOSapache22.4.33-3.50.1
SUSE:Linux Enterprise High Performance Computing 15-LTSSapache22.4.33-3.50.1
SUSE:Linux Enterprise Module for Basesystem 15 SP2apache22.4.43-3.22.1
SUSE:Linux Enterprise Module for Basesystem 15 SP3apache22.4.43-3.22.1
SUSE:Linux Enterprise Module for Package Hub 15 SP3apache22.4.43-3.22.1
SUSE:Linux Enterprise Module for Server Applications 15 SP2apache22.4.43-3.22.1
SUSE:Linux Enterprise Module for Server Applications 15 SP3apache22.4.43-3.22.1
SUSE:Linux Enterprise Server 12 SP2-BCLapache22.4.23-29.74.1
SUSE:Linux Enterprise Server 12 SP3-BCLapache22.4.23-29.74.1
SUSE:Linux Enterprise Server 12 SP3-LTSSapache22.4.23-29.74.1
SUSE:Linux Enterprise Server 12 SP4-LTSSapache22.4.23-29.74.1
SUSE:Linux Enterprise Server 12 SP5apache22.4.23-29.74.1
SUSE:Linux Enterprise Server 15 SP1-BCLapache22.4.33-3.50.1
SUSE:Linux Enterprise Server 15 SP1-LTSSapache22.4.33-3.50.1
SUSE:Linux Enterprise Server 15-LTSSapache22.4.33-3.50.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache22.4.23-29.74.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache22.4.23-29.74.1
SUSE:Linux Enterprise Server for SAP Applications 12 SP5apache22.4.23-29.74.1
SUSE:Linux Enterprise Server for SAP Applications 15apache22.4.33-3.50.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache22.4.33-3.50.1
SUSE:Linux Enterprise Software Development Kit 12 SP5apache22.4.23-29.74.1
SUSE:Manager Proxy 4.0apache22.4.33-3.50.1
SUSE:Manager Retail Branch Server 4.0apache22.4.33-3.50.1
SUSE:Manager Server 4.0apache22.4.33-3.50.1
SUSE:OpenStack Cloud 8apache22.4.23-29.74.1
SUSE:OpenStack Cloud 9apache22.4.23-29.74.1
SUSE:OpenStack Cloud Crowbar 8apache22.4.23-29.74.1
SUSE:OpenStack Cloud Crowbar 9apache22.4.23-29.74.1
Ubuntu:18.04:LTSapache22.4.29-1ubuntu4.16
Ubuntu:20.04:LTSapache22.4.41-4ubuntu3.3
Ubuntu:Pro:14.04:LTSapache22.4.7-1ubuntu4.22+esm1
Ubuntu:Pro:16.04:LTSapache22.4.18-2ubuntu3.17+esm1
openSUSE:Leap 15.2apache22.4.43-lp152.2.15.1
openSUSE:Leap 15.3apache22.4.43-3.22.1