CVE-2021-44790

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

• Apache HTTP Server

  APP
  Apache
  < 2.4.52

• Apple macOS

  OS
  Apple
  12.0 – 12.4 (excl.)< 10.15.711.0 – 11.6.6 (excl.)

• Apple Mac Os X

  OS
  Apple
  10.15.7

• Debian

  OS
  Debian
  10.011.0

• Fedora Project Fedora

  OS
  Fedoraproject
  343536

• Netapp Cloud Backup

  APP
  Netapp
  all versions

• Oracle Communications Element Manager

  APP
  Oracle
  ≤ 9.0

• Oracle Communications Operations Monitor

  APP
  Oracle
  4.34.45.0

• Oracle Communications Session Report Manager

  APP
  Oracle
  ≤ 9.0

• Oracle Communications Session Route Manager

  APP
  Oracle
  ≤ 9.0

• Oracle HTTP Server

  APP
  Oracle
  12.2.1.3.012.2.1.4.0

• Oracle Instantis Enterprisetrack

  APP
  Oracle
  17.117.217.3

• Oracle Zfs Storage Appliance Kit

  APP
  Oracle
  8.8

• Tenable Tenable.sc

  APP
  Tenable
  5.16.0 – 5.20.0 (excl.)