Wind River Support Network


LIN1021-2244 : Security Advisory - apache2 - CVE-2021-44224

Created: Dec 20, 2021    Updated: Mar 11, 2022
Resolved Date: Mar 11, 2022
Found In Version:
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace


A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).

CREATE(Triage):(User=admin) CVE-2021-44224 (
Live chat