topic Recently Discovered Apache vulnerability cve-2021-44790 in General Topics

Recently Discovered Apache vulnerability cve-2021-44790

jberg712 — Wed, 29 Dec 2021 20:36:03 GMT

Hi,

I just recently came upon an article regarding cve-2021-44790. Its a buffer overflow regarding mod_lua in Apache HTTPD. It looks like it moved it's CVSS score to 9.8. I don't see an IPS protection and was wondering if something will come out or if this is a concern... especially with the recent take in R80.40 having an upgrade to Apache to version 2.4.51 which is a vulnerable version.

Jonathan

Re: Recently Discovered Apache vulnerability cve-2021-44790

genisis__ — Wed, 29 Dec 2021 23:00:35 GMT

It looks like the cve is rectified in Apache 2.4.52, so it may be the case Checkpoint will update to Apache 2.4.52, but only as matter of good practise. I suspect Checkpoint is not actually vulnerable.

Lets see what the official response is, and of course a signature update would be most welcome.

Re: Recently Discovered Apache vulnerability cve-2021-44790

_Val_ — Thu, 30 Dec 2021 10:23:35 GMT

There are two questions :

Is Check Point affected by CVE-2021-44790? - The answer is NO, we are not vulnerable.
Is there IPS signature? - not just yet, as there is no know exploit to create one.