Search for packages
Package details: pkg:apache/httpd@2.4.14
purl pkg:apache/httpd@2.4.14
Next non-vulnerable version 2.4.53-rc1-candidate
Latest non-vulnerable version 2.4.54
Risk 3.7
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-t7fa-jbkc-aaab
Aliases:
CVE-2021-44224
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
2.4.52
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version