Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be vulnerable to the mentioned CVEs, even if they were properly fixed in Red Hat Enterprise Linux 8.4. CVE-2021-20325 was assigned to that Red Hat specific security regression and it does not affect the upstream versions of httpd.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4537 advisory.

  - Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat     Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat     Enterprise Linux 8.4. A user who installs or updates to Red Hat Enterprise Linux 8.5.0 would be vulnerable     to the mentioned CVEs, even if they were properly fixed in Red Hat Enterprise Linux 8.4. CVE-2021-20325     was assigned to that Red Hat specific security regression and it does not affect the upstream versions of     httpd. (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4537 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4537 advisory.

    - Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via       a crafted request uri-path
    - Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via       a crafted request uri-path
    - Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in       mod_session
    - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
    - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer       dereference in parser
    - Resolves: #1869077 - CVE-2020-11993 httpd:2.4/mod_http2: httpd:
      mod_http2 concurrent pool usage

    mod_md

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4537 advisory.

  - httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5     (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4537 advisory.

  - httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5     (CVE-2021-20325)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184944	Rocky Linux 8 : httpd:2.4 (RLSA-2021:4537)	Nessus	Rocky Linux Local Security Checks	critical
157474	AlmaLinux 8 : httpd:2.4 (ALSA-2021:4537)	Nessus	Alma Linux Local Security Checks	critical
155611	Oracle Linux 8 : httpd:2.4 (ELSA-2021-4537)	Nessus	Oracle Linux Local Security Checks	critical
155102	RHEL 8 : httpd:2.4 (RHSA-2021:4537)	Nessus	Red Hat Local Security Checks	critical
155042	CentOS 8 : httpd:2.4 (CESA-2021:4537)	Nessus	CentOS Local Security Checks	critical

Detections

Analytics

CVE-2021-20325

critical

Tenable Plugins

critical

critical

critical

critical

critical