Description
Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions.
Below is a complete list of vulnerabilities:
- Heap overflow vulnerability in mod_session can be exploited via special crafted SessionHandler to cause denial of service.
- NULL pointer dereference vulnerability in mod_session can be exploited via special crafted coockie header to cause denial of service.
- Security bypass vulnerability vulnerability in httpd can be exploited to bypass security restrictions.
- NULL pointer dereference vulnerability in mod_http2 can be exploited via special crafted HTTP/2 request to cause denial of service.
- Security bypass vulnerability in mod_proxy_wstunnel can be exploited to bypass security restrictions.
- Stack overflow vulnerability in mod_auth_digest can be exploited bia specia crafted digest to cause denial of service.
- Security bypass vulnerability in « MergeSlashes OFF » can be exploited via special crafted URL to bypass security restrictions.
- NULL pointer dereference vulnerability in mod_proxy_http can be exploited via special crafted requests to cause denial of service.
Fiches de renseignement originales
Exploitation
Public exploits exist for this vulnerability.
Produits associés
Liste CVE
- CVE-2021-26691 critical
- CVE-2021-26690 critical
- CVE-2020-13938 high
- CVE-2021-31618 critical
- CVE-2019-17567 high
- CVE-2020-35452 high
- CVE-2021-30641 high
- CVE-2020-13950 critical
En savoir plus
Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com
Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !