CVE-2021-34798

Опубликовано: 16 сент. 2021

Источник: redhat

CVSS3: 7.5

EPSS Средний

Описание

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

A NULL pointer dereference in httpd allows an unauthenticated remote attacker to crash httpd by providing malformed HTTP requests. The highest threat from this vulnerability is to system availability.

Меры по смягчению последствий

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	httpd	Out of support scope
Red Hat Enterprise Linux 9	httpd	Not affected
Red Hat JBoss Enterprise Application Platform 6	httpd	Out of support scope
JBoss Core Services for RHEL 8	jbcs-httpd24-apr	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-apr-util	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-curl	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-httpd	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-mod_cluster-native	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-mod_http2	Fixed	RHSA-2021:4614	10.11.2021
JBoss Core Services for RHEL 8	jbcs-httpd24-mod_jk	Fixed	RHSA-2021:4614	10.11.2021

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=2005128httpd: NULL pointer dereference via malformed requests

EPSS

Процентиль: 93%

0.11686

Средний

7.5 High

CVSS3

Связанные уязвимости

CVE-2021-34798

CVSS3: 7.5

ubuntu

почти 4 года назад

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

CVE-2021-34798

CVSS3: 7.5

nvd

почти 4 года назад

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

CVE-2021-34798

CVSS3: 7.5

msrc

больше 3 лет назад

Описание отсутствует

CVE-2021-34798

CVSS3: 7.5

debian

почти 4 года назад

Malformed requests may cause the server to dereference a NULL pointer. ...

GHSA-6cg7-x9gh-4wf6

CVSS3: 7.5

github

около 3 лет назад

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

EPSS

Процентиль: 93%

0.11686

Средний

7.5 High

CVSS3