Are the KACE SMA and KACE SDA appliances affected by CVE-2021-44790 and CVE-2021-44224? (4262507)

This article addresses the status of the KACE SMA and KACE SDA Appliances in regards to the Apache HTTP Server vulnerabilities identified under:

• CVE-2021-44790: Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
• CVE-2021-44224: Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

For more details regarding these vulnerabilities, please refer to Fixed in Apache HTTP Server 2.4.52 section of the Apache HTTP Server 2.4 vulnerabilities page.

It has been confirmed that the vulnerabilities identified under CVE-2021-44790 and CVE-2021-44224 do not impact the KACE SMA and KACE SDA appliances.

Quest recommends that all customers ensure they are running a supported version of the KACE SMA and KACE SDA appliances.

For any questions or assistance on this topic please contact our Tech Support.