CVE-2021-40540

Name of the Vulnerable Software and Affected Versions Ulfius HTTP Framework versions prior to 2.7.4

Description The issue arises from the ulfius uri logger in the Ulfius HTTP Framework, which fails to initialize con info and perform a con info->request NULL check for certain malformed HTTP requests. This can lead to remote memory corruption.

Recommendations For versions prior to 2.7.4, update to version 2.7.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the ulfius uri logger function until a patch is available.