RHSA-2021:3836
- Source
- https://access.redhat.com/errata/RHSA-2021:3836
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2021:3836.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/RHSA-2021:3836
- Upstream
- Published
- 2024-09-13T17:28:07Z
- Modified
- 2025-09-11T11:43:09Z
- Severity
-
- 9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: httpd:2.4 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2021:3836
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2005117
- https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3836.json
- https://access.redhat.com/security/cve/CVE-2021-40438
- https://www.cve.org/CVERecord?id=CVE-2021-40438
- https://nvd.nist.gov/vuln/detail/CVE-2021-40438
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Affected packages
Red Hat:rhel_eus:8.2::appstream / httpd-2.4.37
Package
- Name
- httpd-2.4.37
- Purl
- pkg:rpm/redhat/httpd
Red Hat:rhel_eus:8.2::appstream / httpd-debuginfo-2.4.37
Package
- Name
- httpd-debuginfo-2.4.37
- Purl
- pkg:rpm/redhat/httpd-debuginfo
Red Hat:rhel_eus:8.2::appstream / httpd-debugsource-2.4.37
Package
- Name
- httpd-debugsource-2.4.37
- Purl
- pkg:rpm/redhat/httpd-debugsource
Red Hat:rhel_eus:8.2::appstream / httpd-devel-2.4.37
Package
- Name
- httpd-devel-2.4.37
- Purl
- pkg:rpm/redhat/httpd-devel
Red Hat:rhel_eus:8.2::appstream / httpd-filesystem-2.4.37
Package
- Name
- httpd-filesystem-2.4.37
- Purl
- pkg:rpm/redhat/httpd-filesystem
Red Hat:rhel_eus:8.2::appstream / httpd-manual-2.4.37
Package
- Name
- httpd-manual-2.4.37
- Purl
- pkg:rpm/redhat/httpd-manual
Red Hat:rhel_eus:8.2::appstream / httpd-tools-2.4.37
Package
- Name
- httpd-tools-2.4.37
- Purl
- pkg:rpm/redhat/httpd-tools
Red Hat:rhel_eus:8.2::appstream / httpd-tools-debuginfo-2.4.37
Package
- Name
- httpd-tools-debuginfo-2.4.37
- Purl
- pkg:rpm/redhat/httpd-tools-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_http2-1.11.3
Package
- Name
- mod_http2-1.11.3
- Purl
- pkg:rpm/redhat/mod_http2
Red Hat:rhel_eus:8.2::appstream / mod_http2-debuginfo-1.11.3
Package
- Name
- mod_http2-debuginfo-1.11.3
- Purl
- pkg:rpm/redhat/mod_http2-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_http2-debugsource-1.11.3
Package
- Name
- mod_http2-debugsource-1.11.3
- Purl
- pkg:rpm/redhat/mod_http2-debugsource
Red Hat:rhel_eus:8.2::appstream / mod_ldap-2.4.37
Package
- Name
- mod_ldap-2.4.37
- Purl
- pkg:rpm/redhat/mod_ldap
Red Hat:rhel_eus:8.2::appstream / mod_ldap-debuginfo-2.4.37
Package
- Name
- mod_ldap-debuginfo-2.4.37
- Purl
- pkg:rpm/redhat/mod_ldap-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_md-2.0.8
Package
- Name
- mod_md-2.0.8
- Purl
- pkg:rpm/redhat/mod_md
Red Hat:rhel_eus:8.2::appstream / mod_md-debuginfo-2.0.8
Package
- Name
- mod_md-debuginfo-2.0.8
- Purl
- pkg:rpm/redhat/mod_md-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_md-debugsource-2.0.8
Package
- Name
- mod_md-debugsource-2.0.8
- Purl
- pkg:rpm/redhat/mod_md-debugsource
Red Hat:rhel_eus:8.2::appstream / mod_proxy_html-2.4.37
Package
- Name
- mod_proxy_html-2.4.37
- Purl
- pkg:rpm/redhat/mod_proxy_html
Red Hat:rhel_eus:8.2::appstream / mod_proxy_html-debuginfo-2.4.37
Package
- Name
- mod_proxy_html-debuginfo-2.4.37
- Purl
- pkg:rpm/redhat/mod_proxy_html-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_session-2.4.37
Package
- Name
- mod_session-2.4.37
- Purl
- pkg:rpm/redhat/mod_session
Red Hat:rhel_eus:8.2::appstream / mod_session-debuginfo-2.4.37
Package
- Name
- mod_session-debuginfo-2.4.37
- Purl
- pkg:rpm/redhat/mod_session-debuginfo
Red Hat:rhel_eus:8.2::appstream / mod_ssl-2.4.37
Package
- Name
- mod_ssl-2.4.37
- Purl
- pkg:rpm/redhat/mod_ssl