Lucene search

K
f5F5F5:K13401920
HistoryOct 20, 2021 - 12:00 a.m.

K13401920 : Apache HTTPD vulnerability CVE-2021-36160

2021-10-2000:00:00
my.f5.com
81

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

Security Advisory Description

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive). (CVE-2021-36160)

Impact

A remote attacker, through a crafted request, can exploit the mod_proxy_uwsgi in Apache httpd to read above its allocated memory and cause the Apache httpd to no longer respond.