Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2021-44790

CWE-787Out-of-bounds Write19 documents12 sources
Severity
9.8CRITICAL
EPSS
86.0%
top 0.61%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedDec 20
Latest updateApr 1

Description

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages13 packages

NVDapache/http_server< 2.4.52
CVEListV5apache_software_foundation/apache_http_serverApache HTTP Server 2.42.4.51
Debianapache2< 2.4.52-1~deb11u2+3
NVDoracle/http_server12.2.1.3.0, 12.2.1.4.0+1
NVDapple/macos11.011.6.6+2

Also affects: Debian Linux 10.0, 11.0, Fedora 34, 35, 36

Patches

🔴Vulnerability Details

5
GHSA
GHSA-c547-2659-q37g: A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)2022-02-08
OSV
apache2 vulnerabilities2022-01-10
OSV
apache2 vulnerabilities2022-01-06
OSV
CVE-2021-44790: A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)2021-12-20
CVEList
Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier2021-12-20

💥Exploits & PoCs

1
Exploit-DB
Apache 2.4.x - Buffer Overflow2023-04-01

📋Vendor Advisories

12
Oracle
Oracle Oracle Communications Risk Matrix: Management (Apache HTTP Server) — CVE-2021-447902022-10-15
Apple
CVE-2021-44790: macOS Big Sur 11.6.62022-05-16
Apple
CVE-2021-44790: Security Update 2022-004 Catalina2022-05-16
Apple
CVE-2021-44790: macOS Monterey 12.42022-05-16
Oracle
Oracle Oracle Communications Risk Matrix: Security (Apache HTTP Server) — CVE-2021-447902022-04-15