Upgrade HTTP Server version 2.4.51 to Address Vulnerabilities
Article ID: 229421
Updated On:
Products
Issue/Introduction
We need to update Apache HTTP to version 2.4.51 to prevent vulnerabilities CVE-2021-41773 and CVE-2021-42013
CVE-2021-41773
https://nvd.nist.gov/vuln/detail/CVE-2021-41773
CVE-2021-42013
https://nvd.nist.gov/vuln/detail/CVE-2021-42013
Environment
Release : 21.2
Component : Spectrum OneClick
Cause
Apache Releases HTTP Server version 2.4.51 to Address Vulnerabilities Under Exploitation
Resolution
NetOps 21.2.6 due out in December/January will update Apache HTTP to 21.4.51
Additional Information
Apache HTTP is only used with the Mod Security option. This is not configured nor enabled by default so HTTP does not run unless Mod Security was setup and configured
Apache Releases HTTP Server version 2.4.51 to Address Vulnerabilities Under Exploitation
https://us-cert.cisa.gov/ncas/current-activity/2021/10/07/apache-releases-http-server-version-2451-address-vulnerabilities
Feedback
