CVE-2021-36160

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.30 through 2.4.48

Description A carefully crafted request uri-path can cause mod proxy uwsgi to read above the allocated memory and crash, resulting in a denial of service (DoS). The issue is related to the mod proxy uwsgi function in the Apache HTTP Server, which allows a remote attacker to exploit the vulnerability by sending a specially crafted uri-path request.

Recommendations For Apache HTTP Server versions 2.4.30 through 2.4.48, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.