RHSA-2022:0303: Important: httpd24-httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.<br>Security Fix(es):<br><li> httpd: modlua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:0303?
The vulnerability has a high severity due to a possible buffer overflow in mod_lua when parsing multipart content.
How do I fix RHSA-2022:0303?
You can fix RHSA-2022:0303 by updating to the patched version 2.4.34-23.el7.1 of the httpd packages.
Which packages are affected by RHSA-2022:0303?
The affected packages include httpd24-httpd, httpd24-httpd-devel, httpd24-httpd-tools, and others related to the Apache HTTP Server.
What is the CVE associated with RHSA-2022:0303?
The associated CVE for this vulnerability is CVE-2021-44790.
Is RHSA-2022:0303 applicable to all systems?
RHSA-2022:0303 applies specifically to systems running the affected versions of the Apache HTTP Server on Red Hat Enterprise Linux.