PT-2021-5091

CVE-2021-34798

·

Published

2021-09-16

·

Updated

2026-10-09

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.48 and earlier
Description The issue is related to malformed requests that can cause the server to dereference a NULL pointer, potentially leading to a denial of service. This can be exploited by a remote attacker using specially crafted HTTP requests.
Recommendations For Apache HTTP Server versions 2.4.48 and earlier, consider updating to a newer version to resolve the issue. As a temporary workaround, restrict access to the server to minimize the risk of exploitation. Additionally, monitor server logs for suspicious activity and consider implementing additional security measures to prevent malicious requests.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2022:0891
ALT-PU-2021-2866
ALT-PU-2021-2972
ALT-PU-2021-3037
ALT-PU-2021-3060
AZL-6484
BIT-APACHE-2021-34798
CESA-2022_0143
CESA-2022_0891
CLEANSTART-2026-QJ65507
DLA-2776-1
DSA-4982-1
MGASA-2021-0439
OESA-2021-1369
OPENSUSE-SU-2021:1438-1
OPENSUSE-SU-2021_1438-1
OPENSUSE-SU-2021:3522-1
OPENSUSE-SU-2021_3522-1
RHSA-2021:4614
RHSA-2022:0143
RHSA-2022_0143
RHSA-2022:0891
RHSA-2022_0891
RHSA-2022:6753
RLSA-2022:0891
ROSA-SA-2023-2158
SUSE-SU-2021:3299-1
SUSE-SU-2021:3335-1
SUSE-SU-2021:3522-1
USN-5090-1
USN-5090-2
USN-5090-3
USN-5090-4
Found an issue in the description? Have something to add? Feel free to write us 👾