CVE:CVE-2021-40438
CNNVD:CNNVD-202109-1094
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server存在代码问题漏洞，该漏洞是由于系统对用户的输入没有进行严格的过滤导致，攻击者可以构造恶意数据对目标服务器进行SSRF攻击。该漏洞可做为攻击目标服务器内网的跳板，以此对服务器所在内网进行端口扫描、攻击运行在内网的应用程序、下载内网资源等。
solution:Upgrade apache http_server to a higher version than 2.4.48,and avoid the version (,2.4.48]; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp storagegrid to a higher version than -; Upgrade f5 f5os to a higher version than 1.1.4,1.2.1,and avoid the version [1.1.0,1.1.4],[1.2.0,1.2.1]; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle instantis_enterprisetrack to a higher version than 17.1,17.2,17.3,and avoid the version 17.1,17.2,17.3; Upgrade oracle secure_global_desktop to a higher version than 5.6,and avoid the version 5.6; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8; Upgrade siemens sinec_nms to a higher version than *; Upgrade siemens sinema_server to a higher version than 14.0,and avoid the version 14.0