Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:BIT-APACHE-2021-41524
HistoryMar 06, 2024 - 10:54 a.m.

BIT-apache-2021-41524

2024-03-0610:54:53
Google
osv.dev
49
apache
http/2
dos
vulnerability
version 2.4.49

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.5%

JSON

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.

CPENameOperatorVersion
apachege2.4.49
apachele2.4.49

Related

ubuntucve 1
cbl_mariner 1
httpd 1
cvelist 1
prion 1
f5 1
veracode 1
osv 1
nvd 1
redhatcve 1
cnvd 1
alpinelinux 1
cve 1
debiancve 1
fedora 2
slackware 1
nessus 7
kaspersky 1
altlinux 2
openvas 6
mageia 1
thn 1
freebsd 1
hivepro 1
malwarebytes 1
photon 2
cisco 1
redhat 2
amazon 2
gentoo 1
oracle 1
ubuntucve
ubuntucve
CVE-2021-41524
2021-10-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-41524 affecting package httpd 2.4.49-1
2021-10-15 04:46:31
httpd
httpd
Apache Httpd < 2.4.50 : null pointer dereference in h2 fuzzing
2021-10-04 00:00:00
cvelist
cvelist
CVE-2021-41524 null pointer dereference in h2 fuzzing
2021-10-05 08:40:11
prion
prion
Null pointer dereference
2021-10-05 09:15:00
f5
f5
K56331254 : Apache HTTP server vulnerability CVE-2021-41524
2021-11-05 00:00:00
veracode
veracode
Denial Of Service (DoS)
2021-10-06 09:50:40
osv
osv
CVE-2021-41524
2021-10-05 09:15:07
nvd
nvd
CVE-2021-41524
2021-10-05 09:15:07
redhatcve
redhatcve
CVE-2021-41524
2021-10-05 17:08:31
cnvd
cnvd
Apache HTTP Server Denial of Service Vulnerability (CNVD-2022-09237)
2021-10-10 00:00:00
alpinelinux
alpinelinux
CVE-2021-41524
2021-10-05 09:15:07
cve
cve
CVE-2021-41524
2021-10-05 09:15:07
debiancve
debiancve
CVE-2021-41524
2021-10-05 09:15:07
fedora
fedora
[SECURITY] Fedora 35 Update: httpd-2.4.50-1.fc35
2021-10-29 23:19:42
[SECURITY] Fedora 34 Update: httpd-2.4.50-1.fc34
2021-10-07 17:19:23
slackware
slackware
[slackware-security] httpd
2021-10-06 01:14:05
nessus
nessus
FreeBSD : Apache httpd -- Multiple vulnerabilities (25b78bdd-25b8-11ec-a341-d4c9ef517024)
2021-10-06 00:00:00
Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities
2021-10-05 00:00:00
Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities
2021-10-06 00:00:00
kaspersky
kaspersky
KLA12371 Multiple vulnerabilities in Apache HTTP Server
2021-10-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.50-alt1
2021-10-07 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.50-alt1
2021-10-07 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2021-278-01)
2022-04-21 00:00:00
Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Windows
2021-10-05 00:00:00
Mageia: Security Advisory (MGASA-2021-0461)
2022-01-28 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-10-06 17:38:41
thn
thn
Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!
2021-10-05 14:53:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-10-05 00:00:00
hivepro
hivepro
Multiple vulnerabilities have been discovered in the Apache HTTP Server
2021-10-06 08:57:02
malwarebytes
malwarebytes
[Updated, again] Apache fixes zero-day vulnerability in HTTP Server
2021-10-06 14:23:08
photon
photon
Critical Photon OS Security Update - PHSA-2021-0118
2021-10-19 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0118
2021-10-20 00:00:00
cisco
cisco
Apache HTTP Server Vulnerabilities: October 2021
2021-10-07 16:00:00
redhat
redhat
(RHSA-2022:7143) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:05:14
(RHSA-2022:7144) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:04:31
amazon
amazon
Important: httpd
2021-10-15 07:57:00
Important: httpd24
2021-10-15 07:52:00
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

6.6 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.5%

JSON
Related for OSV:BIT-APACHE-2021-41524
ubuntucve1cbl_mariner1httpd1cvelist1prion1f51veracode1osv1nvd1redhatcve1cnvd1alpinelinux1cve1debiancve1fedora2slackware1nessus7kaspersky1altlinux2openvas6mageia1thn1freebsd1hivepro1malwarebytes1photon2cisco1redhat2amazon2gentoo1oracle1