CVE-2021-44790

CRITICAL severity · CVSS 9.8 · Out-of-bounds write

9.8CVSS CRITICAL

Summary

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)86%

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products we track (1)

Apache HTTP Server

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://httpd.apache.org/security/vulnerabilities_24.htmlAdvisory
http://seclists.org/fulldisclosure/2022/May/33Advisory
http://seclists.org/fulldisclosure/2022/May/35Advisory
http://seclists.org/fulldisclosure/2022/May/38Advisory
http://www.openwall.com/lists/oss-security/2021/12/20/4Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/Advisory
http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.htmlExploit