Popis
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- Heap overflow vulnerability in mod_session can be exploited via special crafted SessionHandler to cause denial of service.
- NULL pointer dereference vulnerability in mod_session can be exploited via special crafted coockie header to cause denial of service.
- Security bypass vulnerability vulnerability in httpd can be exploited to bypass security restrictions.
- NULL pointer dereference vulnerability in mod_http2 can be exploited via special crafted HTTP/2 request to cause denial of service.
- Security bypass vulnerability in mod_proxy_wstunnel can be exploited to bypass security restrictions.
- Stack overflow vulnerability in mod_auth_digest can be exploited bia specia crafted digest to cause denial of service.
- Security bypass vulnerability in „MergeSlashes OFF“ can be exploited via special crafted URL to bypass security restrictions.
- NULL pointer dereference vulnerability in mod_proxy_http can be exploited via special crafted requests to cause denial of service.
Oficiální doporučení
Vykořisťování
Public exploits exist for this vulnerability.
Související produkty
seznam CVE
- CVE-2021-26691 critical
- CVE-2021-26690 critical
- CVE-2020-13938 high
- CVE-2021-31618 critical
- CVE-2019-17567 high
- CVE-2020-35452 high
- CVE-2021-30641 high
- CVE-2020-13950 critical
Zobrazit více
Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com
Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!