CVE-2021-39275

一、漏洞信息
 漏洞编号：[CVE-2021-39275](https://nvd.nist.gov/vuln/detail/CVE-2021-39275)
 漏洞归属组件：[httpd](https://gitee.com/src-openeuler/httpd)
 漏洞归属的版本：2.4.34,2.4.43,2.4.46,2.4.48
 CVSS V3.0分值：
  BaseScore：9.8 Critical
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 漏洞简述：
  ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
 漏洞公开时间：2021-09-16 23:15
 漏洞创建时间：2021-09-29 10:28:48
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2021-39275
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| MISC | https://httpd.apache.org/security/vulnerabilities_24.html |  |
| FEDORA | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ |  |
| MLIST | https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E |  |
| MLIST | https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E |  |
| MLIST | https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E |  |
| MLIST | https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E |  |
| FEDORA | https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/ |  |
| MLIST | https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html |  |
| CONFIRM | https://security.netapp.com/advisory/ntap-20211008-0004/ |  |
| DEBIAN | https://www.debian.org/security/2021/dsa-4982 |  |
| CISCO | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ |  |
| MISC | https://www.oracle.com/security-alerts/cpujan2022.html |  |
| MISC | https://www.oracle.com/security-alerts/cpuapr2022.html |  |
| CONFIRM | https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf |  |
| redhat | https://access.redhat.com/security/cve/CVE-2021-39275 |  |
| suse_bugzilla | https://httpd.apache.org/security/vulnerabilities_24.html |  |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2005119 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-39275 |  |
| suse_bugzilla | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39275 |  |
| suse_bugzilla | https://github.com/apache/httpd/commit/d8bce6f575abb29997bba358b31842bf757776c6  |  |
| suse_bugzilla | https://github.com/apache/httpd/commit/e0fec7d48dab1924c5a6b48819ce1cf420733f62 |  |
| redhat_bugzilla | httpd tracking bugs for this issue: |  |
| redhat_bugzilla | httpd24-httpd ? |  |
| ubuntu | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39275 |  |
| ubuntu | https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2021-39275 |  |
| ubuntu | https://httpd.apache.org/security/vulnerabilities_24.html |  |
| ubuntu | https://ubuntu.com/security/notices/USN-5090-1 |  |
| ubuntu | https://ubuntu.com/security/notices/USN-5090-2 |  |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2021-39275 |  |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2021-39275 |  |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2021-39275 |  |
| debian | https://security-tracker.debian.org/tracker/CVE-2021-39275 |  |
| oracle | https://www.oracle.com/security-alerts/linuxbulletinjan2022.html |  |
| httpd | https://httpd.apache.org/security/vulnerabilities_24.html |  |
| MISC | https://www.oracle.com/security-alerts/cpujan2022.html |  |
| lists |  https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ |  |
| lists |  https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029@%3Cusers.httpd.apache.org%3E |  |
| lists |  https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697@%3Cusers.httpd.apache.org%3E |  |
| lists |  https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432@%3Cusers.httpd.apache.org%3E |  |
| lists |  https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c@%3Cusers.httpd.apache.org%3E |  |
| lists |  https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/ |  |
| lists |  https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html |  |
| security |  https://security.netapp.com/advisory/ntap-20211008-0004/ |  |
| debian |  https://www.debian.org/security/2021/dsa-4982 |  |
| tools |  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ |  |
| oracle |  https://www.oracle.com/security-alerts/cpujan2022.html |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  其它
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://github.com/apache/httpd/commit/d8bce6f575abb29997bba358b31842bf757776c6 |  | suse_bugzilla |
|  |  | https://github.com/apache/httpd/commit/e0fec7d48dab1924c5a6b48819ce1cf420733f62 |  | suse_bugzilla |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
    在2.4.48及之前的httpd版本中，当给出恶意输入时，ap_escape_quotes() 可能会写入超出缓冲区的末尾，影响系统可用性 
 openEuler评分：
  7.5
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS(2.4.43):受影响
2.openEuler-20.03-LTS-Next(2.4.43):受影响
3.openEuler-20.03-LTS-SP1(2.4.43):受影响
4.openEuler-20.03-LTS-SP2(2.4.43):受影响

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS(2.4.43):否
2.openEuler-20.03-LTS-SP1(2.4.43):否
3.openEuler-20.03-LTS-Next(2.4.43):否
4.openEuler-20.03-LTS-SP2(2.4.43):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2021-1387

src-openEuler/httpd

内容风险标识

评论 (9)

src-openEuler/httpd .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2021-39275

评论 (9)

搜索帮助

src-openEuler/httpd