The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2022:0258 advisory.

  - httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0258 advisory.

    The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

    Security Fix(es):

    * httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-018 advisory.

    There's a null pointer dereference and server-side request forgery flaw in httpd's mod_proxy module, when     it is configured to be used as a forward proxy. A crafted packet could be sent on the adjacent network to     the forward proxy that could cause a crash, or potentially SSRF via misdirected Unix Domain Socket     requests. In the worst case, this could cause a denial of service or compromise to confidentiality of     data. (CVE-2021-44224)

    A buffer overflow flaw in httpd's lua module could allow an out-of-bounds write. An attacker who is able     to submit a crafted request to an httpd instance that is using the lua module may be able to cause an     impact to confidentiality, integrity, and/or availability. (CVE-2021-44790)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2686-1 advisory.

    This update for apache2 fixes the following issues

    - CVE-2026-23918: http2: double free and possible RCE on early reset (bsc#1263957).
    - CVE-2026-24072: mod_rewrite elevation of privileges via ap_expr (bsc#1263935).
    - CVE-2026-28780: heap buffer overflow in `mod_proxy_ajp` via `ajp_msg_check_header()` (bsc#1264163).
    - CVE-2026-29167: mod_ldap per-dir use-after-free (bsc#1267976).
    - CVE-2026-29168: allocation of resources without limits in `mod_md` via OCSP response (bsc#1264150).
    - CVE-2026-29169: NULL pointer dereference in `mod_dav_lock` allows server crash via malicious requests     (bsc#1263956).
    - CVE-2026-29170: mod_proxy_ftp XSS (bsc#1267977).
    - CVE-2026-33006: `mod_auth_digest` timing attack allows bypass of Digest authentication (bsc#1263955).
    - CVE-2026-33007: NULL pointer dereference in `mod_authn_socache` allows unauthenticated remote user to     crash a child       processes (bsc#1263954).
    - CVE-2026-33523: HTTP response splitting forwarding malicious status line (bsc#1263953).
    - CVE-2026-33857: off-by-one OOB reads in AJP getter functions (bsc#1263952).
    - CVE-2026-34032: heap buffer overread in `mod_proxy_ajp` due to missing null-termination check     (bsc#1263951).
    - CVE-2026-34059: heap buffer overread and memory disclosure via `ajp_parse_data()` (bsc#1263950).
    - CVE-2026-34355: mod_proxy_html buffer overflow (bsc#1267978).
    - CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow (bsc#1267955).
    - CVE-2026-42535: malicious path manipulation can lead to child process crashes (bsc#1267956).
    - CVE-2026-42536: processing untrusted content can lead to a heap-based buffer overflow (bsc#1267962).
    - CVE-2026-43951: out-of-bound read in `merge_response_headers` can cause crash (bsc#1267963).
    - CVE-2026-44119: improper privilege management can lead to an unauthorized read (bsc#1267965).
    - CVE-2026-44185: Stack Buffer Over-Read in mod_ssl OCSP `send_request` (bsc#1267969).
    - CVE-2026-44186: responses from an attacker-controlled FTP backend can lead to resource exhaustion and a     denial of       service (bsc#1267970).
    - CVE-2026-44631: crafted regular expression can lead to a buffer underwrite (bsc#1267971).
    - CVE-2026-48913: file handle exhaustion during request processing in mod_http2 can lead to a use-after-     free       (bsc#1267972).
    - CVE-2026-49975: Fix cookie header accounting against LimitRequestFields (bsc#1267503).

    Non security issue:

    - Update to 2.4.66 (jsc#PED-16334).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0666 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2021-44790:
    A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser     (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the     vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and     earlier.

    CVE-2022-36760:
    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of     Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to.  This     issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.

    CVE-2022-37436:
    Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated     early, resulting in some headers being incorporated into the response body. If the later headers have any     security purpose, they will not be interpreted by the client.

    CVE-2023-25690:
    Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request     Smuggling attack.

    Configurations are affected when mod_proxy is enabled along with some form of RewriteRule      or ProxyPassMatch in which a non-specific pattern matches      some portion of the user-supplied request-target (URL) data and is then      re-inserted into the proxied request-target using variable     substitution. For example, something like:

    RewriteEngine on     RewriteRule ^/here/(.*) http://example.com:8080/elsewhere?$1; [P]     ProxyPassReverse /here/ http://example.com:8080/

    Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying     unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at     least version 2.4.56 of Apache HTTP Server.

    CVE-2023-27522:
    HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache     HTTP Server: from 2.4.30 through 2.4.55.

    Special characters in the origin response header can truncate/split the response forwarded to the client.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0143-1 advisory.

  - httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)

  - httpd: mod_session: Heap overflow via a crafted SessionHeader value (CVE-2021-26691)

  - httpd: NULL pointer dereference via malformed requests (CVE-2021-34798)

  - httpd: Out-of-bounds write in ap_escape_quotes() via malicious input (CVE-2021-39275)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0143 advisory.

  - In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server     could cause a heap overflow (CVE-2021-26691)

  - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP     Server 2.4.48 and earlier. (CVE-2021-34798)

  - ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules     pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache     HTTP Server 2.4.48 and earlier. (CVE-2021-39275)

  - A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser     (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the     vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and     earlier. (CVE-2021-44790)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has httpd packages installed that are affected by multiple vulnerabilities:

  - In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server     could cause a heap overflow (CVE-2021-26691)

  - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP     Server 2.4.48 and earlier. (CVE-2021-34798)

  - ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules     pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache     HTTP Server 2.4.48 and earlier. (CVE-2021-39275)

  - A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser     (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the     vulnerability though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and     earlier. (CVE-2021-44790)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
157080	CentOS 8 : httpd:2.4 (CESA-2022:0258)	Nessus	CentOS Local Security Checks	2022/1/26	2023/11/17	critical
157099	RHEL 8 : httpd:2.4 (RHSA-2022:0258)	Nessus	Red Hat Local Security Checks	2022/1/26	2025/3/6	critical
212486	Amazon Linux 2022 : httpd, httpd-devel, httpd-filesystem (ALAS2022-2022-018)	Nessus	Amazon Linux Local Security Checks	2024/12/11	2024/12/12	critical
324047	SUSE SLES15: apache2 / apache2-devel / apache2-doc / apache2-prefork / etc (SUSE-SU-2026:2686-1)	Nessus	SuSE Local Security Checks	2026/7/1	2026/7/1	high
239126	TencentOS Server 4: httpd (TSSA-2024:0666)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
156803	Scientific Linux Security Update : httpd on SL7.x x86_64 (2022:0143)	Nessus	Scientific Linux Local Security Checks	2022/1/18	2023/11/20	critical
157118	CentOS 7 : httpd (RHSA-2022:0143)	Nessus	CentOS Local Security Checks	2022/1/26	2024/10/9	critical
160800	NewStart CGSL CORE 5.04 / MAIN 5.04 : httpd Multiple Vulnerabilities (NS-SA-2022-0021)	Nessus	NewStart CGSL Local Security Checks	2022/5/9	2023/10/30	critical

检测

插件搜索

critical

critical

critical

high

critical

critical

critical

critical