Critical severity · published Dec 20, 2021
CVE-2021-44790
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)
9.8
CVSS
96.8%
EPSS
No
On KEV
Description
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)96.8% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
HTTP Server · Apache
before 2.4.52 · source: NVD
MA
macOS · Apple
before 10.15.7; 11.0 before 11.6.6; 12.0 before 12.4 · source: NVD
CB
Cloud Backup · Netapp
All versions, or not specified · source: NVD
CE
Communications Element Manager · Oracle
through 9.0 · source: NVD
CO
Communications Operations Monitor · Oracle
4.3; 4.4; 5.0 · source: NVD
CS
Communications Session Report Manager · Oracle
through 9.0 · source: NVD
CS
Communications Session Route Manager · Oracle
through 9.0 · source: NVD
DL
Debian Linux · Debian
10.0; 11.0 · source: NVD
FE
Fedora · Fedoraproject
34; 35; 36 · source: NVD
IE
Instantis Enterprisetrack · Oracle
17.1; 17.2; 17.3 · source: NVD
MO
Mac OS X · Apple
10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; 10.15.7; +6 more · source: NVD
TE
Tenable.sc · Tenable
5.16.0 before 5.20.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-44790
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-44790
Vendor Advisory
http://httpd.apache.org/security/vulnerabilities_24.html
Exploit
http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html
Mailing List
http://seclists.org/fulldisclosure/2022/May/33
Mailing List
http://seclists.org/fulldisclosure/2022/May/35
Mailing List
http://seclists.org/fulldisclosure/2022/May/38
Mailing List
http://www.openwall.com/lists/oss-security/2021/12/20/4
More from HTTP Server
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.1
CVE-2024-38475
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2019-0211
Apache HTTP Server Privilege Escalation Vulnerability