Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be vulnerable to the mentioned CVEs, even if they were properly fixed in Red Hat Enterprise Linux 8.4. CVE-2021-20325 was assigned to that Red Hat specific security regression and it does not affect the upstream versions of httpd.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2021_4537 advisory.

    * httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Rocky Linux 8.5 (CVE-2021-20325)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2541:01 advisory.

    httpd: mod_session: NULL pointer dereference when parsing Cookie header     (CVE-2021-26690)         httpd: Unexpected URL matching with 'MergeSlashes OFF' (CVE-2021-30641)         httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in MIRACLE     LINUX 8.4 (CVE-2021-20325)     CVE(s):
    CVE-2021-26690     Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can     cause a NULL pointer dereference and crash, leading to a possible Denial Of Service     CVE-2021-30641     Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'     CVE-2021-20325
    ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when     announcing a new security problem. When the candidate has been publicized, the details for this candidate     will be provided.
    Modularity name: httpd     Stream name: 2.4

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-2988:01 advisory.

    * httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Miracle Linux (CVE-2021-20325)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4537 advisory.

  - Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat     Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat     Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be vulnerable     to the mentioned CVEs, even if they were properly fixed in Red Hat Enterprise Linux 8.4. CVE-2021-20325     was assigned to that Red Hat specific security regression and it does not affect the upstream versions of     httpd. (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4537 advisory.

    * httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in AlmaLinux (CVE-2021-20325)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4537 advisory.

    - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via       a crafted request uri-path
    - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via       a crafted request uri-path
    - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in       mod_session
    - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
    - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer       dereference in parser
    - Resolves: #1869077 - CVE-2020-11993 httpd:2.4/mod_http2: httpd:
      mod_http2 concurrent pool usage

    mod_md

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4537 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5     (CVE-2021-20325)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4537 advisory.

  - httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5     (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
359342	Rocky Linux 8 [CIQ] Security Update: httpd / httpd-debuginfo / httpd-debugsource / httpd-devel / etc (crlsa-2021_4537)	Nessus	Rocky Linux Local Security Checks	Local	critical
294771	MiracleLinux 8 : httpd:2.4 (AXSA:2021-2541:01)	Nessus	Miracle Linux Local Security Checks	Local	critical
294190	MiracleLinux 8 : httpd:2.4 (AXSA:2022-2988:01)	Nessus	Miracle Linux Local Security Checks	Local	critical
184944	Rocky Linux 8 : httpd:2.4 (RLSA-2021:4537)	Nessus	Rocky Linux Local Security Checks	Local	critical
157474	AlmaLinux 8 : httpd:2.4 (ALSA-2021:4537)	Nessus	Alma Linux Local Security Checks	Local	critical
155611	Oracle Linux 8 : httpd:2.4 (ELSA-2021-4537)	Nessus	Oracle Linux Local Security Checks	Local	critical
155102	RHEL 8 : httpd:2.4 (RHSA-2021:4537)	Nessus	Red Hat Local Security Checks	Local	critical
155042	CentOS 8 : httpd:2.4 (CESA-2021:4537)	Nessus	CentOS Local Security Checks	Local	critical

Detections

Analytics

CVE-2021-20325

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical