CVE-2021-20325

httpd-tools: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es...

CVE-2021-20325 is fixed in 11 products on 1 platform, first by RHSA-2021:4537, released November 9, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
9.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0159
75th percentile

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es): * httpd: Regression of CVE-2021-40438 and CVE-2021-26691 fixes in Red Hat Enterprise Linux 8.5 (CVE-2021-20325) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
httpd · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
httpd · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
httpd · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
httpd · rocky 8 0:2.4.37-43.module+el8.5.0+714+5ec56ee8 RLSA-2021:4537 Nov 9, 2021
httpd-devel · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
httpd-devel · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
httpd-devel · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
httpd-filesystem · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
httpd-filesystem · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
httpd-filesystem · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
httpd-manual · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
httpd-manual · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
httpd-manual · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
httpd-tools · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
httpd-tools · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
httpd-tools · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
mod_http2 · RHEL 8 0:1.15.7-3.module+el8.4.0+8625+d397f3da RHSA-2021:4537 Nov 9, 2021
mod_http2 · almalinux 8 1.15.7-3.module_el8.5.0+2609+b30d9eec ALSA-2021:4537 Nov 9, 2021
mod_http2 · ol 8 0:1.15.7-3.module+el8.4.0+20024+b87b2deb ELSA-2021-4537 Nov 18, 2021
mod_http2 · rocky 8 0:1.15.7-3.module+el8.4.0+553+7a69454b RLSA-2021:4537 Nov 9, 2021
mod_ldap · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
mod_ldap · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
mod_ldap · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
mod_md · RHEL 8 1:2.0.8-8.module+el8.3.0+6814+67d1e611 RHSA-2021:4537 Nov 9, 2021
mod_md · almalinux 8 1:2.0.8-8.module_el8.5.0+2609+b30d9eec ALSA-2021:4537 Nov 9, 2021
mod_md · ol 8 1:2.0.8-8.module+el8.3.0+7816+49791cfd ELSA-2021-4537 Nov 18, 2021
mod_md · rocky 8 1:2.0.8-8.module+el8.5.0+695+1fa8055e RLSA-2021:4537 Nov 9, 2021
mod_proxy_html · RHEL 8 1:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
mod_proxy_html · almalinux 8 1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
mod_proxy_html · ol 8 1:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
mod_session · RHEL 8 0:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
mod_session · almalinux 8 2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
mod_session · ol 8 0:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021
mod_ssl · RHEL 8 1:2.4.37-43.module+el8.5.0+13064+c4b14997 RHSA-2021:4537 Nov 9, 2021
mod_ssl · almalinux 8 1:2.4.37-43.module_el8.5.0+2597+c4b14997.alma ALSA-2021:4537 Nov 9, 2021
mod_ssl · ol 8 1:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9 ELSA-2021-4537 Nov 18, 2021

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.