{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "NULL pointer dereference on specially crafted HTTP/2 request", "tracking": { "current_release_date": "2026-08-11T14:55:48+00:00", "generator": { "date": "2026-08-11T14:55:48+00:00", "engine": { "name": "CSAF Generator", "version": "3.3.0" } }, "id": "CVE-2021-31618", "initial_release_date": "2021-06-04T00:00:00+00:00", "revision_history": [ { "date": "2026-08-11T14:55:48+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7.9.z", "product": { "name": "Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.1.0.z", "product": { "name": "Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.2.0.z", "product": { "name": "Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.4.0.z", "product": { "name": "Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.5", "product": { "name": "Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0", "product": { "name": "Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Software Collections", "product": { "name": "Red Hat Software Collections", "product_id": "rhscl-3.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3" } } }, { "category": "product_name", "name": "Red Hat Software Collections", "product": { "name": "Red Hat Software Collections", "product_id": "rhscl-3.8.0", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3" } } }, { "category": "product_version", "name": "httpd", "product": { "name": "httpd", "product_id": "httpd", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd" } } }, { "category": "product_version", "name": "httpd-core", "product": { "name": "httpd-core", "product_id": "httpd-core", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-core" } } }, { "category": "product_version", "name": "httpd-debuginfo", "product": { "name": "httpd-debuginfo", "product_id": "httpd-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-debuginfo" } } }, { "category": "product_version", "name": "httpd-debugsource", "product": { "name": "httpd-debugsource", "product_id": "httpd-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-debugsource" } } }, { "category": "product_version", "name": "httpd-devel", "product": { "name": "httpd-devel", "product_id": "httpd-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-devel" } } }, { "category": "product_version", "name": "httpd-filesystem", "product": { "name": "httpd-filesystem", "product_id": "httpd-filesystem", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-filesystem" } } }, { "category": "product_version", "name": "httpd-manual", "product": { "name": "httpd-manual", "product_id": "httpd-manual", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-manual" } } }, { "category": "product_version", "name": "httpd-tools", "product": { "name": "httpd-tools", "product_id": "httpd-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-tools" } } }, { "category": "product_version", "name": "httpd-tools-debuginfo", "product": { "name": "httpd-tools-debuginfo", "product_id": "httpd-tools-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd-tools-debuginfo" } } }, { "category": "product_version", "name": "httpd", "product": { "name": "httpd", "product_id": "httpd.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd?arch=src" } } }, { "category": "product_version", "name": "httpd24-httpd", "product": { "name": "httpd24-httpd", "product_id": "httpd24-httpd", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd" } } }, { "category": "product_version", "name": "httpd24-httpd-devel", "product": { "name": "httpd24-httpd-devel", "product_id": "httpd24-httpd-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-devel" } } }, { "category": "product_version", "name": "httpd24-httpd-manual", "product": { "name": "httpd24-httpd-manual", "product_id": "httpd24-httpd-manual", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-manual" } } }, { "category": "product_version", "name": "httpd24-httpd-tools", "product": { "name": "httpd24-httpd-tools", "product_id": "httpd24-httpd-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd-tools" } } }, { "category": "product_version", "name": "httpd24-httpd", "product": { "name": "httpd24-httpd", "product_id": "httpd24-httpd.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-httpd?arch=src" } } }, { "category": "product_version", "name": "httpd24-mod_ldap", "product": { "name": "httpd24-mod_ldap", "product_id": "httpd24-mod_ldap", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ldap" } } }, { "category": "product_version", "name": "httpd24-mod_md", "product": { "name": "httpd24-mod_md", "product_id": "httpd24-mod_md", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_md" } } }, { "category": "product_version", "name": "httpd24-mod_proxy_html", "product": { "name": "httpd24-mod_proxy_html", "product_id": "httpd24-mod_proxy_html", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_proxy_html" } } }, { "category": "product_version", "name": "httpd24-mod_session", "product": { "name": "httpd24-mod_session", "product_id": "httpd24-mod_session", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_session" } } }, { "category": "product_version", "name": "httpd24-mod_ssl", "product": { "name": "httpd24-mod_ssl", "product_id": "httpd24-mod_ssl", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd24-mod_ssl" } } }, { "category": "product_version", "name": "httpd:2.4/httpd", "product": { "name": "httpd:2.4/httpd", "product_id": "httpd:2.4/httpd.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/httpd?arch=src&rpmmod=httpd:2.4" } } }, { "category": "product_version", "name": "mod_ldap", "product": { "name": "mod_ldap", "product_id": "mod_ldap", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_ldap" } } }, { "category": "product_version", "name": "mod_ldap-debuginfo", "product": { "name": "mod_ldap-debuginfo", "product_id": "mod_ldap-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_ldap-debuginfo" } } }, { "category": "product_version", "name": "mod_lua", "product": { "name": "mod_lua", "product_id": "mod_lua", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_lua" } } }, { "category": "product_version", "name": "mod_md", "product": { "name": "mod_md", "product_id": "mod_md", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_md" } } }, { "category": "product_version", "name": "mod_proxy_html", "product": { "name": "mod_proxy_html", "product_id": "mod_proxy_html", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_proxy_html" } } }, { "category": "product_version", "name": "mod_proxy_html-debuginfo", "product": { "name": "mod_proxy_html-debuginfo", "product_id": "mod_proxy_html-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_proxy_html-debuginfo" } } }, { "category": "product_version", "name": "mod_session", "product": { "name": "mod_session", "product_id": "mod_session", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_session" } } }, { "category": "product_version", "name": "mod_session-debuginfo", "product": { "name": "mod_session-debuginfo", "product_id": "mod_session-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_session-debuginfo" } } }, { "category": "product_version", "name": "mod_ssl", "product": { "name": "mod_ssl", "product_id": "mod_ssl", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_ssl" } } }, { "category": "product_version", "name": "mod_ssl-debuginfo", "product": { "name": "mod_ssl-debuginfo", "product_id": "mod_ssl-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/mod_ssl-debuginfo" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd" }, "product_reference": "httpd", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-core as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd-core" }, "product_reference": "httpd-core", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-debuginfo" }, "product_reference": "httpd-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd-debuginfo" }, "product_reference": "httpd-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-debugsource as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-debugsource" }, "product_reference": "httpd-debugsource", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-devel as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd-devel" }, "product_reference": "httpd-devel", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-filesystem as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd-filesystem" }, "product_reference": "httpd-filesystem", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-filesystem as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd-filesystem" }, "product_reference": "httpd-filesystem", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-filesystem as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd-filesystem" }, "product_reference": "httpd-filesystem", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-filesystem as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd-filesystem" }, "product_reference": "httpd-filesystem", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-filesystem as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-filesystem" }, "product_reference": "httpd-filesystem", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-manual as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:httpd-manual" }, "product_reference": "httpd-manual", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:httpd-tools" }, "product_reference": "httpd-tools", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd-tools-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd-tools-debuginfo" }, "product_reference": "httpd-tools-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:httpd.src" }, "product_reference": "httpd.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd.src as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:httpd.src" }, "product_reference": "httpd.src", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd.src as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:httpd.src" }, "product_reference": "httpd.src", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-httpd" }, "product_reference": "httpd24-httpd", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-httpd" }, "product_reference": "httpd24-httpd", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-httpd-devel" }, "product_reference": "httpd24-httpd-devel", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-devel as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-httpd-devel" }, "product_reference": "httpd24-httpd-devel", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-httpd-manual" }, "product_reference": "httpd24-httpd-manual", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-manual as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-httpd-manual" }, "product_reference": "httpd24-httpd-manual", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-httpd-tools" }, "product_reference": "httpd24-httpd-tools", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd-tools as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-httpd-tools" }, "product_reference": "httpd24-httpd-tools", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd.src as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-httpd.src" }, "product_reference": "httpd24-httpd.src", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-httpd.src as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-httpd.src" }, "product_reference": "httpd24-httpd.src", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-mod_ldap" }, "product_reference": "httpd24-mod_ldap", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ldap as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-mod_ldap" }, "product_reference": "httpd24-mod_ldap", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-mod_md" }, "product_reference": "httpd24-mod_md", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_md as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-mod_md" }, "product_reference": "httpd24-mod_md", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-mod_proxy_html" }, "product_reference": "httpd24-mod_proxy_html", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_proxy_html as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-mod_proxy_html" }, "product_reference": "httpd24-mod_proxy_html", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-mod_session" }, "product_reference": "httpd24-mod_session", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_session as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-mod_session" }, "product_reference": "httpd24-mod_session", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl as a component of Red Hat Software Collections", "product_id": "rhscl-3.8.0:httpd24-mod_ssl" }, "product_reference": "httpd24-mod_ssl", "relates_to_product_reference": "rhscl-3.8.0" }, { "category": "default_component_of", "full_product_name": { "name": "httpd24-mod_ssl as a component of Red Hat Software Collections", "product_id": "rhscl-3.7.z:httpd24-mod_ssl" }, "product_reference": "httpd24-mod_ssl", "relates_to_product_reference": "rhscl-3.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd:2.4/httpd.src as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:httpd:2.4/httpd.src" }, "product_reference": "httpd:2.4/httpd.src", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "httpd:2.4/httpd.src as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:httpd:2.4/httpd.src" }, "product_reference": "httpd:2.4/httpd.src", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd:2.4/httpd.src as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:httpd:2.4/httpd.src" }, "product_reference": "httpd:2.4/httpd.src", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "httpd:2.4/httpd.src as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:httpd:2.4/httpd.src" }, "product_reference": "httpd:2.4/httpd.src", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_ldap" }, "product_reference": "mod_ldap", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ldap-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_ldap-debuginfo" }, "product_reference": "mod_ldap-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_lua as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_lua" }, "product_reference": "mod_lua", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_md as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_md" }, "product_reference": "mod_md", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_md as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:mod_md" }, "product_reference": "mod_md", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_md as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_md" }, "product_reference": "mod_md", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_md as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:mod_md" }, "product_reference": "mod_md", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "mod_md as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:mod_md" }, "product_reference": "mod_md", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:mod_proxy_html" }, "product_reference": "mod_proxy_html", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "mod_proxy_html-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_proxy_html-debuginfo" }, "product_reference": "mod_proxy_html-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:mod_session" }, "product_reference": "mod_session", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "mod_session-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_session-debuginfo" }, "product_reference": "mod_session-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 8.5", "product_id": "rhel-8.5.0:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-8.5.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 8.1.0.z", "product_id": "rhel-8.1.0.z:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-8.1.0.z" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 9.0", "product_id": "rhel-9.0:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-9.0" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 8.2.0.z", "product_id": "rhel-8.2.0.z.aus:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-8.2.0.z.aus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-8.4.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl as a component of Red Hat Enterprise Linux 7.9.z", "product_id": "rhel-7.9.z.els:mod_ssl" }, "product_reference": "mod_ssl", "relates_to_product_reference": "rhel-7.9.z.els" }, { "category": "default_component_of", "full_product_name": { "name": "mod_ssl-debuginfo as a component of Red Hat Enterprise Linux 8.4.0.z", "product_id": "rhel-8.4.0.z.eus:mod_ssl-debuginfo" }, "product_reference": "mod_ssl-debuginfo", "relates_to_product_reference": "rhel-8.4.0.z.eus" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-31618", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2021-06-04T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:httpd", "rhel-6-els.els:httpd-debuginfo", "rhel-6-els.els:httpd-devel", "rhel-6-els.els:httpd-manual", "rhel-6-els.els:httpd-tools", "rhel-6-els.els:httpd.src", "rhel-6-els.els:mod_ssl", "rhel-7.9.z.els:httpd", "rhel-7.9.z.els:httpd-devel", "rhel-7.9.z.els:httpd-manual", "rhel-7.9.z.els:httpd-tools", "rhel-7.9.z.els:httpd.src", "rhel-7.9.z.els:mod_ldap", "rhel-7.9.z.els:mod_proxy_html", "rhel-7.9.z.els:mod_session", "rhel-7.9.z.els:mod_ssl", "rhel-8.1.0.z:httpd", "rhel-8.1.0.z:httpd-devel", "rhel-8.1.0.z:httpd-filesystem", "rhel-8.1.0.z:httpd-manual", "rhel-8.1.0.z:httpd-tools", "rhel-8.1.0.z:httpd:2.4/httpd.src", "rhel-8.1.0.z:mod_ldap", "rhel-8.1.0.z:mod_md", "rhel-8.1.0.z:mod_proxy_html", "rhel-8.1.0.z:mod_session", "rhel-8.1.0.z:mod_ssl", "rhel-8.2.0.z.aus:httpd", "rhel-8.2.0.z.aus:httpd-devel", "rhel-8.2.0.z.aus:httpd-filesystem", "rhel-8.2.0.z.aus:httpd-manual", "rhel-8.2.0.z.aus:httpd-tools", "rhel-8.2.0.z.aus:httpd:2.4/httpd.src", "rhel-8.2.0.z.aus:mod_ldap", "rhel-8.2.0.z.aus:mod_md", "rhel-8.2.0.z.aus:mod_proxy_html", "rhel-8.2.0.z.aus:mod_session", "rhel-8.2.0.z.aus:mod_ssl", "rhel-8.4.0.z.eus:httpd", "rhel-8.4.0.z.eus:httpd-debuginfo", "rhel-8.4.0.z.eus:httpd-debugsource", "rhel-8.4.0.z.eus:httpd-devel", "rhel-8.4.0.z.eus:httpd-filesystem", "rhel-8.4.0.z.eus:httpd-manual", "rhel-8.4.0.z.eus:httpd-tools", "rhel-8.4.0.z.eus:httpd-tools-debuginfo", "rhel-8.4.0.z.eus:httpd:2.4/httpd.src", "rhel-8.4.0.z.eus:mod_ldap", "rhel-8.4.0.z.eus:mod_ldap-debuginfo", "rhel-8.4.0.z.eus:mod_md", "rhel-8.4.0.z.eus:mod_proxy_html", "rhel-8.4.0.z.eus:mod_proxy_html-debuginfo", "rhel-8.4.0.z.eus:mod_session", "rhel-8.4.0.z.eus:mod_session-debuginfo", "rhel-8.4.0.z.eus:mod_ssl", "rhel-8.4.0.z.eus:mod_ssl-debuginfo", "rhel-8.5.0:httpd", "rhel-8.5.0:httpd-devel", "rhel-8.5.0:httpd-filesystem", "rhel-8.5.0:httpd-manual", "rhel-8.5.0:httpd-tools", "rhel-8.5.0:httpd:2.4/httpd.src", "rhel-8.5.0:mod_ldap", "rhel-8.5.0:mod_md", "rhel-8.5.0:mod_proxy_html", "rhel-8.5.0:mod_session", "rhel-8.5.0:mod_ssl", "rhel-9.0:httpd", "rhel-9.0:httpd-core", "rhel-9.0:httpd-devel", "rhel-9.0:httpd-filesystem", "rhel-9.0:httpd-manual", "rhel-9.0:httpd-tools", "rhel-9.0:httpd.src", "rhel-9.0:mod_ldap", "rhel-9.0:mod_lua", "rhel-9.0:mod_md", "rhel-9.0:mod_proxy_html", "rhel-9.0:mod_session", "rhel-9.0:mod_ssl", "rhscl-3.7.z:httpd24-httpd", "rhscl-3.7.z:httpd24-httpd-devel", "rhscl-3.7.z:httpd24-httpd-manual", "rhscl-3.7.z:httpd24-httpd-tools", "rhscl-3.7.z:httpd24-httpd.src", "rhscl-3.7.z:httpd24-mod_ldap", "rhscl-3.7.z:httpd24-mod_md", "rhscl-3.7.z:httpd24-mod_proxy_html", "rhscl-3.7.z:httpd24-mod_session", "rhscl-3.7.z:httpd24-mod_ssl", "rhscl-3.8.0:httpd24-httpd", "rhscl-3.8.0:httpd24-httpd-devel", "rhscl-3.8.0:httpd24-httpd-manual", "rhscl-3.8.0:httpd24-httpd-tools", "rhscl-3.8.0:httpd24-httpd.src", "rhscl-3.8.0:httpd24-mod_ldap", "rhscl-3.8.0:httpd24-mod_md", "rhscl-3.8.0:httpd24-mod_proxy_html", "rhscl-3.8.0:httpd24-mod_session", "rhscl-3.8.0:httpd24-mod_ssl" ] } ], "notes": [ { "category": "other", "text": "This issue was introduced in httpd via the following commit: https://github.com/icing/mod_h2/commit/1207f69bff3804c7920a57af7649d1eef8b645de#diff-4493820f9733c68fc77b402fc7c57ae05e272e5d3d76deb32b1608c116078313 \nVersions of httpd package shipped with Red Hat Products do not include this vulnerable code and therefore are not affected by this flaw.", "title": "Statement" }, { "category": "description", "text": "A null pointer de-reference was found in the way httpd handled specially crafted HTTP/2 request. A remote attacker could use this flaw to crash the httpd child process, causing temporary denial of service.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "rhel-6-els.els:httpd", "rhel-6-els.els:httpd-debuginfo", "rhel-6-els.els:httpd-devel", "rhel-6-els.els:httpd-manual", "rhel-6-els.els:httpd-tools", "rhel-6-els.els:httpd.src", "rhel-6-els.els:mod_ssl", "rhel-7.9.z.els:httpd", "rhel-7.9.z.els:httpd-devel", "rhel-7.9.z.els:httpd-manual", "rhel-7.9.z.els:httpd-tools", "rhel-7.9.z.els:httpd.src", "rhel-7.9.z.els:mod_ldap", "rhel-7.9.z.els:mod_proxy_html", "rhel-7.9.z.els:mod_session", "rhel-7.9.z.els:mod_ssl", "rhel-8.1.0.z:httpd", "rhel-8.1.0.z:httpd-devel", "rhel-8.1.0.z:httpd-filesystem", "rhel-8.1.0.z:httpd-manual", "rhel-8.1.0.z:httpd-tools", "rhel-8.1.0.z:httpd:2.4/httpd.src", "rhel-8.1.0.z:mod_ldap", "rhel-8.1.0.z:mod_md", "rhel-8.1.0.z:mod_proxy_html", "rhel-8.1.0.z:mod_session", "rhel-8.1.0.z:mod_ssl", "rhel-8.2.0.z.aus:httpd", "rhel-8.2.0.z.aus:httpd-devel", "rhel-8.2.0.z.aus:httpd-filesystem", "rhel-8.2.0.z.aus:httpd-manual", "rhel-8.2.0.z.aus:httpd-tools", "rhel-8.2.0.z.aus:httpd:2.4/httpd.src", "rhel-8.2.0.z.aus:mod_ldap", "rhel-8.2.0.z.aus:mod_md", "rhel-8.2.0.z.aus:mod_proxy_html", "rhel-8.2.0.z.aus:mod_session", "rhel-8.2.0.z.aus:mod_ssl", "rhel-8.4.0.z.eus:httpd", "rhel-8.4.0.z.eus:httpd-debuginfo", "rhel-8.4.0.z.eus:httpd-debugsource", "rhel-8.4.0.z.eus:httpd-devel", "rhel-8.4.0.z.eus:httpd-filesystem", "rhel-8.4.0.z.eus:httpd-manual", "rhel-8.4.0.z.eus:httpd-tools", "rhel-8.4.0.z.eus:httpd-tools-debuginfo", "rhel-8.4.0.z.eus:httpd:2.4/httpd.src", "rhel-8.4.0.z.eus:mod_ldap", "rhel-8.4.0.z.eus:mod_ldap-debuginfo", "rhel-8.4.0.z.eus:mod_md", "rhel-8.4.0.z.eus:mod_proxy_html", "rhel-8.4.0.z.eus:mod_proxy_html-debuginfo", "rhel-8.4.0.z.eus:mod_session", "rhel-8.4.0.z.eus:mod_session-debuginfo", "rhel-8.4.0.z.eus:mod_ssl", "rhel-8.4.0.z.eus:mod_ssl-debuginfo", "rhel-8.5.0:httpd", "rhel-8.5.0:httpd-devel", "rhel-8.5.0:httpd-filesystem", "rhel-8.5.0:httpd-manual", "rhel-8.5.0:httpd-tools", "rhel-8.5.0:httpd:2.4/httpd.src", "rhel-8.5.0:mod_ldap", "rhel-8.5.0:mod_md", "rhel-8.5.0:mod_proxy_html", "rhel-8.5.0:mod_session", "rhel-8.5.0:mod_ssl", "rhel-9.0:httpd", "rhel-9.0:httpd-core", "rhel-9.0:httpd-devel", "rhel-9.0:httpd-filesystem", "rhel-9.0:httpd-manual", "rhel-9.0:httpd-tools", "rhel-9.0:httpd.src", "rhel-9.0:mod_ldap", "rhel-9.0:mod_lua", "rhel-9.0:mod_md", "rhel-9.0:mod_proxy_html", "rhel-9.0:mod_session", "rhel-9.0:mod_ssl", "rhscl-3.7.z:httpd24-httpd", "rhscl-3.7.z:httpd24-httpd-devel", "rhscl-3.7.z:httpd24-httpd-manual", "rhscl-3.7.z:httpd24-httpd-tools", "rhscl-3.7.z:httpd24-httpd.src", "rhscl-3.7.z:httpd24-mod_ldap", "rhscl-3.7.z:httpd24-mod_md", "rhscl-3.7.z:httpd24-mod_proxy_html", "rhscl-3.7.z:httpd24-mod_session", "rhscl-3.7.z:httpd24-mod_ssl", "rhscl-3.8.0:httpd24-httpd", "rhscl-3.8.0:httpd24-httpd-devel", "rhscl-3.8.0:httpd24-httpd-manual", "rhscl-3.8.0:httpd24-httpd-tools", "rhscl-3.8.0:httpd24-httpd.src", "rhscl-3.8.0:httpd24-mod_ldap", "rhscl-3.8.0:httpd24-mod_md", "rhscl-3.8.0:httpd24-mod_proxy_html", "rhscl-3.8.0:httpd24-mod_session", "rhscl-3.8.0:httpd24-mod_ssl" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-31618" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-31618" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-31618" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "rhel-6-els.els:httpd", "rhel-6-els.els:httpd-debuginfo", "rhel-6-els.els:httpd-devel", "rhel-6-els.els:httpd-manual", "rhel-6-els.els:httpd-tools", "rhel-6-els.els:httpd.src", "rhel-6-els.els:mod_ssl", "rhel-7.9.z.els:httpd", "rhel-7.9.z.els:httpd-devel", "rhel-7.9.z.els:httpd-manual", "rhel-7.9.z.els:httpd-tools", "rhel-7.9.z.els:httpd.src", "rhel-7.9.z.els:mod_ldap", "rhel-7.9.z.els:mod_proxy_html", "rhel-7.9.z.els:mod_session", "rhel-7.9.z.els:mod_ssl", "rhel-8.1.0.z:httpd", "rhel-8.1.0.z:httpd-devel", "rhel-8.1.0.z:httpd-filesystem", "rhel-8.1.0.z:httpd-manual", "rhel-8.1.0.z:httpd-tools", "rhel-8.1.0.z:httpd:2.4/httpd.src", "rhel-8.1.0.z:mod_ldap", "rhel-8.1.0.z:mod_md", "rhel-8.1.0.z:mod_proxy_html", "rhel-8.1.0.z:mod_session", "rhel-8.1.0.z:mod_ssl", "rhel-8.2.0.z.aus:httpd", "rhel-8.2.0.z.aus:httpd-devel", "rhel-8.2.0.z.aus:httpd-filesystem", "rhel-8.2.0.z.aus:httpd-manual", "rhel-8.2.0.z.aus:httpd-tools", "rhel-8.2.0.z.aus:httpd:2.4/httpd.src", "rhel-8.2.0.z.aus:mod_ldap", "rhel-8.2.0.z.aus:mod_md", "rhel-8.2.0.z.aus:mod_proxy_html", "rhel-8.2.0.z.aus:mod_session", "rhel-8.2.0.z.aus:mod_ssl", "rhel-8.4.0.z.eus:httpd", "rhel-8.4.0.z.eus:httpd-debuginfo", "rhel-8.4.0.z.eus:httpd-debugsource", "rhel-8.4.0.z.eus:httpd-devel", "rhel-8.4.0.z.eus:httpd-filesystem", "rhel-8.4.0.z.eus:httpd-manual", "rhel-8.4.0.z.eus:httpd-tools", "rhel-8.4.0.z.eus:httpd-tools-debuginfo", "rhel-8.4.0.z.eus:httpd:2.4/httpd.src", "rhel-8.4.0.z.eus:mod_ldap", "rhel-8.4.0.z.eus:mod_ldap-debuginfo", "rhel-8.4.0.z.eus:mod_md", "rhel-8.4.0.z.eus:mod_proxy_html", "rhel-8.4.0.z.eus:mod_proxy_html-debuginfo", "rhel-8.4.0.z.eus:mod_session", "rhel-8.4.0.z.eus:mod_session-debuginfo", "rhel-8.4.0.z.eus:mod_ssl", "rhel-8.4.0.z.eus:mod_ssl-debuginfo", "rhel-8.5.0:httpd", "rhel-8.5.0:httpd-devel", "rhel-8.5.0:httpd-filesystem", "rhel-8.5.0:httpd-manual", "rhel-8.5.0:httpd-tools", "rhel-8.5.0:httpd:2.4/httpd.src", "rhel-8.5.0:mod_ldap", "rhel-8.5.0:mod_md", "rhel-8.5.0:mod_proxy_html", "rhel-8.5.0:mod_session", "rhel-8.5.0:mod_ssl", "rhel-9.0:httpd", "rhel-9.0:httpd-core", "rhel-9.0:httpd-devel", "rhel-9.0:httpd-filesystem", "rhel-9.0:httpd-manual", "rhel-9.0:httpd-tools", "rhel-9.0:httpd.src", "rhel-9.0:mod_ldap", "rhel-9.0:mod_lua", "rhel-9.0:mod_md", "rhel-9.0:mod_proxy_html", "rhel-9.0:mod_session", "rhel-9.0:mod_ssl", "rhscl-3.7.z:httpd24-httpd", "rhscl-3.7.z:httpd24-httpd-devel", "rhscl-3.7.z:httpd24-httpd-manual", "rhscl-3.7.z:httpd24-httpd-tools", "rhscl-3.7.z:httpd24-httpd.src", "rhscl-3.7.z:httpd24-mod_ldap", "rhscl-3.7.z:httpd24-mod_md", "rhscl-3.7.z:httpd24-mod_proxy_html", "rhscl-3.7.z:httpd24-mod_session", "rhscl-3.7.z:httpd24-mod_ssl", "rhscl-3.8.0:httpd24-httpd", "rhscl-3.8.0:httpd24-httpd-devel", "rhscl-3.8.0:httpd24-httpd-manual", "rhscl-3.8.0:httpd24-httpd-tools", "rhscl-3.8.0:httpd24-httpd.src", "rhscl-3.8.0:httpd24-mod_ldap", "rhscl-3.8.0:httpd24-mod_md", "rhscl-3.8.0:httpd24-mod_proxy_html", "rhscl-3.8.0:httpd24-mod_session", "rhscl-3.8.0:httpd24-mod_ssl" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "rhel-6-els.els:httpd", "rhel-6-els.els:httpd-debuginfo", "rhel-6-els.els:httpd-devel", "rhel-6-els.els:httpd-manual", "rhel-6-els.els:httpd-tools", "rhel-6-els.els:httpd.src", "rhel-6-els.els:mod_ssl", "rhel-7.9.z.els:httpd", "rhel-7.9.z.els:httpd-devel", "rhel-7.9.z.els:httpd-manual", "rhel-7.9.z.els:httpd-tools", "rhel-7.9.z.els:httpd.src", "rhel-7.9.z.els:mod_ldap", "rhel-7.9.z.els:mod_proxy_html", "rhel-7.9.z.els:mod_session", "rhel-7.9.z.els:mod_ssl", "rhel-8.1.0.z:httpd", "rhel-8.1.0.z:httpd-devel", "rhel-8.1.0.z:httpd-filesystem", "rhel-8.1.0.z:httpd-manual", "rhel-8.1.0.z:httpd-tools", "rhel-8.1.0.z:httpd:2.4/httpd.src", "rhel-8.1.0.z:mod_ldap", "rhel-8.1.0.z:mod_md", "rhel-8.1.0.z:mod_proxy_html", "rhel-8.1.0.z:mod_session", "rhel-8.1.0.z:mod_ssl", "rhel-8.2.0.z.aus:httpd", "rhel-8.2.0.z.aus:httpd-devel", "rhel-8.2.0.z.aus:httpd-filesystem", "rhel-8.2.0.z.aus:httpd-manual", "rhel-8.2.0.z.aus:httpd-tools", "rhel-8.2.0.z.aus:httpd:2.4/httpd.src", "rhel-8.2.0.z.aus:mod_ldap", "rhel-8.2.0.z.aus:mod_md", "rhel-8.2.0.z.aus:mod_proxy_html", "rhel-8.2.0.z.aus:mod_session", "rhel-8.2.0.z.aus:mod_ssl", "rhel-8.4.0.z.eus:httpd", "rhel-8.4.0.z.eus:httpd-debuginfo", "rhel-8.4.0.z.eus:httpd-debugsource", "rhel-8.4.0.z.eus:httpd-devel", "rhel-8.4.0.z.eus:httpd-filesystem", "rhel-8.4.0.z.eus:httpd-manual", "rhel-8.4.0.z.eus:httpd-tools", "rhel-8.4.0.z.eus:httpd-tools-debuginfo", "rhel-8.4.0.z.eus:httpd:2.4/httpd.src", "rhel-8.4.0.z.eus:mod_ldap", "rhel-8.4.0.z.eus:mod_ldap-debuginfo", "rhel-8.4.0.z.eus:mod_md", "rhel-8.4.0.z.eus:mod_proxy_html", "rhel-8.4.0.z.eus:mod_proxy_html-debuginfo", "rhel-8.4.0.z.eus:mod_session", "rhel-8.4.0.z.eus:mod_session-debuginfo", "rhel-8.4.0.z.eus:mod_ssl", "rhel-8.4.0.z.eus:mod_ssl-debuginfo", "rhel-8.5.0:httpd", "rhel-8.5.0:httpd-devel", "rhel-8.5.0:httpd-filesystem", "rhel-8.5.0:httpd-manual", "rhel-8.5.0:httpd-tools", "rhel-8.5.0:httpd:2.4/httpd.src", "rhel-8.5.0:mod_ldap", "rhel-8.5.0:mod_md", "rhel-8.5.0:mod_proxy_html", "rhel-8.5.0:mod_session", "rhel-8.5.0:mod_ssl", "rhel-9.0:httpd", "rhel-9.0:httpd-core", "rhel-9.0:httpd-devel", "rhel-9.0:httpd-filesystem", "rhel-9.0:httpd-manual", "rhel-9.0:httpd-tools", "rhel-9.0:httpd.src", "rhel-9.0:mod_ldap", "rhel-9.0:mod_lua", "rhel-9.0:mod_md", "rhel-9.0:mod_proxy_html", "rhel-9.0:mod_session", "rhel-9.0:mod_ssl", "rhscl-3.7.z:httpd24-httpd", "rhscl-3.7.z:httpd24-httpd-devel", "rhscl-3.7.z:httpd24-httpd-manual", "rhscl-3.7.z:httpd24-httpd-tools", "rhscl-3.7.z:httpd24-httpd.src", "rhscl-3.7.z:httpd24-mod_ldap", "rhscl-3.7.z:httpd24-mod_md", "rhscl-3.7.z:httpd24-mod_proxy_html", "rhscl-3.7.z:httpd24-mod_session", "rhscl-3.7.z:httpd24-mod_ssl", "rhscl-3.8.0:httpd24-httpd", "rhscl-3.8.0:httpd24-httpd-devel", "rhscl-3.8.0:httpd24-httpd-manual", "rhscl-3.8.0:httpd24-httpd-tools", "rhscl-3.8.0:httpd24-httpd.src", "rhscl-3.8.0:httpd24-mod_ldap", "rhscl-3.8.0:httpd24-mod_md", "rhscl-3.8.0:httpd24-mod_proxy_html", "rhscl-3.8.0:httpd24-mod_session", "rhscl-3.8.0:httpd24-mod_ssl" ] } ], "title": "NULL pointer dereference on specially crafted HTTP/2 request" } ] }