CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44224

A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.038

EPSS Ranking 87.7%

CVSS Severity

CVSS v3 Score 8.2

CVSS v2 Score 6.4

References

Products affected by CVE-2021-44224

Apache » Http Server » Version: 2.4.10

cpe:2.3:a:apache:http_server:2.4.10
Apache » Http Server » Version: 2.4.11

cpe:2.3:a:apache:http_server:2.4.11
Apache » Http Server » Version: 2.4.12

cpe:2.3:a:apache:http_server:2.4.12
Apache » Http Server » Version: 2.4.13

cpe:2.3:a:apache:http_server:2.4.13
Apache » Http Server » Version: 2.4.14

cpe:2.3:a:apache:http_server:2.4.14
Apache » Http Server » Version: 2.4.15

cpe:2.3:a:apache:http_server:2.4.15
Apache » Http Server » Version: 2.4.16

cpe:2.3:a:apache:http_server:2.4.16
Apache » Http Server » Version: 2.4.17

cpe:2.3:a:apache:http_server:2.4.17
Apache » Http Server » Version: 2.4.18

cpe:2.3:a:apache:http_server:2.4.18
Apache » Http Server » Version: 2.4.19

cpe:2.3:a:apache:http_server:2.4.19
Apache » Http Server » Version: 2.4.20

cpe:2.3:a:apache:http_server:2.4.20
Apache » Http Server » Version: 2.4.21

cpe:2.3:a:apache:http_server:2.4.21
Apache » Http Server » Version: 2.4.22

cpe:2.3:a:apache:http_server:2.4.22
Apache » Http Server » Version: 2.4.23

cpe:2.3:a:apache:http_server:2.4.23
Apache » Http Server » Version: 2.4.24

cpe:2.3:a:apache:http_server:2.4.24
Apache » Http Server » Version: 2.4.25

cpe:2.3:a:apache:http_server:2.4.25
Apache » Http Server » Version: 2.4.26

cpe:2.3:a:apache:http_server:2.4.26
Apache » Http Server » Version: 2.4.27

cpe:2.3:a:apache:http_server:2.4.27
Apache » Http Server » Version: 2.4.28

cpe:2.3:a:apache:http_server:2.4.28
Apache » Http Server » Version: 2.4.29

cpe:2.3:a:apache:http_server:2.4.29
Apache » Http Server » Version: 2.4.30

cpe:2.3:a:apache:http_server:2.4.30
Apache » Http Server » Version: 2.4.31

cpe:2.3:a:apache:http_server:2.4.31
Apache » Http Server » Version: 2.4.32

cpe:2.3:a:apache:http_server:2.4.32
Apache » Http Server » Version: 2.4.33

cpe:2.3:a:apache:http_server:2.4.33
Apache » Http Server » Version: 2.4.34

cpe:2.3:a:apache:http_server:2.4.34
Apache » Http Server » Version: 2.4.35

cpe:2.3:a:apache:http_server:2.4.35
Apache » Http Server » Version: 2.4.36

cpe:2.3:a:apache:http_server:2.4.36
Apache » Http Server » Version: 2.4.37

cpe:2.3:a:apache:http_server:2.4.37
Apache » Http Server » Version: 2.4.38

cpe:2.3:a:apache:http_server:2.4.38
Apache » Http Server » Version: 2.4.39

cpe:2.3:a:apache:http_server:2.4.39
Apache » Http Server » Version: 2.4.40

cpe:2.3:a:apache:http_server:2.4.40
Apache » Http Server » Version: 2.4.41

cpe:2.3:a:apache:http_server:2.4.41
Apache » Http Server » Version: 2.4.42

cpe:2.3:a:apache:http_server:2.4.42
Apache » Http Server » Version: 2.4.43

cpe:2.3:a:apache:http_server:2.4.43
Apache » Http Server » Version: 2.4.44

cpe:2.3:a:apache:http_server:2.4.44
Apache » Http Server » Version: 2.4.45

cpe:2.3:a:apache:http_server:2.4.45
Apache » Http Server » Version: 2.4.46

cpe:2.3:a:apache:http_server:2.4.46
Apache » Http Server » Version: 2.4.47

cpe:2.3:a:apache:http_server:2.4.47
Apache » Http Server » Version: 2.4.48

cpe:2.3:a:apache:http_server:2.4.48
Apache » Http Server » Version: 2.4.49

cpe:2.3:a:apache:http_server:2.4.49
Apache » Http Server » Version: 2.4.50

cpe:2.3:a:apache:http_server:2.4.50
Apache » Http Server » Version: 2.4.51

cpe:2.3:a:apache:http_server:2.4.51
Apache » Http Server » Version: 2.4.7

cpe:2.3:a:apache:http_server:2.4.7
Apache » Http Server » Version: 2.4.8

cpe:2.3:a:apache:http_server:2.4.8
Apache » Http Server » Version: 2.4.9

cpe:2.3:a:apache:http_server:2.4.9
Oracle » Communications Element Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_element_manager:8.0.0
Oracle » Communications Element Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_element_manager:8.1.0
Oracle » Communications Element Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_element_manager:8.1.1
Oracle » Communications Element Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_element_manager:8.2.0
Oracle » Communications Element Manager » Version: 8.2.0.0

cpe:2.3:a:oracle:communications_element_manager:8.2.0.0
Oracle » Communications Element Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_element_manager:8.2.1
Oracle » Communications Element Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_element_manager:8.2.2
Oracle » Communications Element Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_element_manager:8.2.2.1
Oracle » Communications Element Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_element_manager:8.2.4.0
Oracle » Communications Operations Monitor » Version: 4.0

cpe:2.3:a:oracle:communications_operations_monitor:4.0
Oracle » Communications Operations Monitor » Version: 4.3

cpe:2.3:a:oracle:communications_operations_monitor:4.3
Oracle » Communications Operations Monitor » Version: 4.4

cpe:2.3:a:oracle:communications_operations_monitor:4.4
Oracle » Communications Operations Monitor » Version: 5.0

cpe:2.3:a:oracle:communications_operations_monitor:5.0
Oracle » Communications Session Report Manager » Version: N/A

cpe:2.3:a:oracle:communications_session_report_manager:-
Oracle » Communications Session Report Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0
Oracle » Communications Session Report Manager » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Report Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2
Oracle » Communications Session Report Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1
Oracle » Communications Session Report Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0
Oracle » Communications Session Report Manager » Version: 8.2.5.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.5.0
Oracle » Communications Session Route Manager » Version: N/A

cpe:2.3:a:oracle:communications_session_route_manager:-
Oracle » Communications Session Route Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.0.0
Oracle » Communications Session Route Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_route_manager:8.1.0
Oracle » Communications Session Route Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_route_manager:8.1.1
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.2.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0
Oracle » Communications Session Route Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.1
Oracle » Communications Session Route Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2
Oracle » Communications Session Route Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2.1
Oracle » Communications Session Route Manager » Version: 8.2.4

cpe:2.3:a:oracle:communications_session_route_manager:8.2.4
Oracle » Communications Session Route Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.4.0
Oracle » Communications Session Route Manager » Version: 8.2.5

cpe:2.3:a:oracle:communications_session_route_manager:8.2.5
Oracle » Http Server » Version: N/A

cpe:2.3:a:oracle:http_server:-
Oracle » Http Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:http_server:12.2.1.3.0
Oracle » Http Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:http_server:12.2.1.4.0
Oracle » Instantis Enterprisetrack » Version: 17.1

cpe:2.3:a:oracle:instantis_enterprisetrack:17.1
Oracle » Instantis Enterprisetrack » Version: 17.2

cpe:2.3:a:oracle:instantis_enterprisetrack:17.2
Oracle » Instantis Enterprisetrack » Version: 17.3

cpe:2.3:a:oracle:instantis_enterprisetrack:17.3
Tenable » Tenable.sc » Version: 5.14.0

cpe:2.3:a:tenable:tenable.sc:5.14.0
Tenable » Tenable.sc » Version: 5.14.1

cpe:2.3:a:tenable:tenable.sc:5.14.1
Tenable » Tenable.sc » Version: 5.16.0

cpe:2.3:a:tenable:tenable.sc:5.16.0
Tenable » Tenable.sc » Version: 5.17.0

cpe:2.3:a:tenable:tenable.sc:5.17.0
Tenable » Tenable.sc » Version: 5.18.0

cpe:2.3:a:tenable:tenable.sc:5.18.0
Tenable » Tenable.sc » Version: 5.19.0

cpe:2.3:a:tenable:tenable.sc:5.19.0
Tenable » Tenable.sc » Version: 5.19.1

cpe:2.3:a:tenable:tenable.sc:5.19.1
Tenable » Tenable.sc » Version: 5.20.0

cpe:2.3:a:tenable:tenable.sc:5.20.0
Tenable » Tenable.sc » Version: 5.20.1

cpe:2.3:a:tenable:tenable.sc:5.20.1
Tenable » Tenable.sc » Version: 5.21.0

cpe:2.3:a:tenable:tenable.sc:5.21.0
Tenable » Tenable.sc » Version: 5.23.1

cpe:2.3:a:tenable:tenable.sc:5.23.1
Apple » Mac Os X » Version: 10.15.7

cpe:2.3:o:apple:mac_os_x:10.15.7
Apple » Macos » Version: N/A

cpe:2.3:o:apple:macos:-
Apple » Macos » Version: 1.0

cpe:2.3:o:apple:macos:1.0
Apple » Macos » Version: 11.0

cpe:2.3:o:apple:macos:11.0
Apple » Macos » Version: 11.0.1

cpe:2.3:o:apple:macos:11.0.1
Apple » Macos » Version: 11.1

cpe:2.3:o:apple:macos:11.1
Apple » Macos » Version: 11.1.0

cpe:2.3:o:apple:macos:11.1.0
Apple » Macos » Version: 11.2

cpe:2.3:o:apple:macos:11.2
Apple » Macos » Version: 11.2.1

cpe:2.3:o:apple:macos:11.2.1
Apple » Macos » Version: 11.3

cpe:2.3:o:apple:macos:11.3
Apple » Macos » Version: 11.3.1

cpe:2.3:o:apple:macos:11.3.1
Apple » Macos » Version: 11.4

cpe:2.3:o:apple:macos:11.4
Apple » Macos » Version: 11.5

cpe:2.3:o:apple:macos:11.5
Apple » Macos » Version: 11.5.1

cpe:2.3:o:apple:macos:11.5.1
Apple » Macos » Version: 11.6

cpe:2.3:o:apple:macos:11.6
Apple » Macos » Version: 11.6.1

cpe:2.3:o:apple:macos:11.6.1
Apple » Macos » Version: 11.6.2

cpe:2.3:o:apple:macos:11.6.2
Apple » Macos » Version: 11.6.3

cpe:2.3:o:apple:macos:11.6.3
Apple » Macos » Version: 11.6.5

cpe:2.3:o:apple:macos:11.6.5
Apple » Macos » Version: 12.0.0

cpe:2.3:o:apple:macos:12.0.0
Apple » Macos » Version: 12.0.1

cpe:2.3:o:apple:macos:12.0.1
Apple » Macos » Version: 12.1

cpe:2.3:o:apple:macos:12.1
Apple » Macos » Version: 12.2

cpe:2.3:o:apple:macos:12.2
Apple » Macos » Version: 12.2.1

cpe:2.3:o:apple:macos:12.2.1
Apple » Macos » Version: 12.3

cpe:2.3:o:apple:macos:12.3
Apple » Macos » Version: 12.3.1

cpe:2.3:o:apple:macos:12.3.1
Apple » Macos » Version: 7.5.3

cpe:2.3:o:apple:macos:7.5.3
Apple » Macos » Version: 7.6

cpe:2.3:o:apple:macos:7.6
Apple » Macos » Version: 7.6.1

cpe:2.3:o:apple:macos:7.6.1
Apple » Macos » Version: 8.0

cpe:2.3:o:apple:macos:8.0
Apple » Macos » Version: 8.1

cpe:2.3:o:apple:macos:8.1
Apple » Macos » Version: 8.5

cpe:2.3:o:apple:macos:8.5
Apple » Macos » Version: 8.6

cpe:2.3:o:apple:macos:8.6
Apple » Macos » Version: 9

cpe:2.3:o:apple:macos:9
Apple » Macos » Version: 9.0

cpe:2.3:o:apple:macos:9.0
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-44224

Products

Pricing

Contact Us