cisco-sa-apache-httpd-2.4.49-VWL69sWQ: Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021
First published: Wed Nov 24 2021(Updated: )
On September 16, 2021, the Apache Software Foundation disclosed five vulnerabilities affecting the Apache HTTP Server (httpd) 2.4.48 and earlier releases. For a description of these vulnerabilities, see the Apache HTTP Server 2.4.49 section of the Apache HTTP Server 2.4 vulnerabilities webpage. This advisory will be updated as additional information becomes available. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ
Credit: These vulnerabilities were publicly disclosed by the Apache Software Foundation on September 16 2021.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Http Server | <2.4.49 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of cisco-sa-apache-httpd-2.4.49-VWL69sWQ?
The severity of cisco-sa-apache-httpd-2.4.49-VWL69sWQ is high due to the multiple vulnerabilities that could allow for remote code execution and denial of service.
How do I fix cisco-sa-apache-httpd-2.4.49-VWL69sWQ?
To fix cisco-sa-apache-httpd-2.4.49-VWL69sWQ, you should upgrade your Apache HTTP Server to version 2.4.50 or later.
What vulnerabilities are addressed in cisco-sa-apache-httpd-2.4.49-VWL69sWQ?
cisco-sa-apache-httpd-2.4.49-VWL69sWQ addresses five vulnerabilities affecting Apache HTTP Server that may lead to severe impacts including arbitrary code execution.
Is cisco-sa-apache-httpd-2.4.49-VWL69sWQ applicable to all Apache HTTP Server installations?
cisco-sa-apache-httpd-2.4.49-VWL69sWQ is applicable to all Apache HTTP Server versions up to 2.4.49, so any installation using that version or earlier is vulnerable.
Are there any workarounds for cisco-sa-apache-httpd-2.4.49-VWL69sWQ?
No official workarounds for cisco-sa-apache-httpd-2.4.49-VWL69sWQ are provided; upgrading to a secure version is the recommended course of action.
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/event
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/references
- agent/author
- agent/title
- agent/remedy
- agent/severity
- agent/description
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/apache
- canonical/apache http server