PT-2021-5091
CVE-2021-34798
·
Published
2021-09-16
·
Updated
2026-10-09
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Apache HTTP Server versions 2.4.48 and earlier
Description
The issue is related to malformed requests that can cause the server to dereference a NULL pointer, potentially leading to a denial of service. This can be exploited by a remote attacker using specially crafted HTTP requests.
Recommendations
For Apache HTTP Server versions 2.4.48 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the server to minimize the risk of exploitation. Additionally, monitor server logs for suspicious activity and consider implementing additional security measures to prevent malicious requests.
Found an issue in the description? Have something to add? Feel free to write us 👾