Lucene search
MitreCVELIST:CVE-2021-42717HistoryDec 07, 2021 - 9:08 p.m.
CVE-2021-42717
2021-12-0721:08:28
mitre
raw.githubusercontent.com
ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-thousands deep could result in the web server being unable to service legitimate requests. Even a moderately large (e.g., 300KB) HTTP request can occupy one of the limited NGINX worker processes for minutes and consume almost all of the available CPU on the machine. Modsecurity 2 is similarly vulnerable: the affected versions include 2.8.0 through 2.9.4.
Related
nessus
nessus
Debian DSA-5023-1 : modsecurity-apache - security update
2021-12-19 00:00:00
EulerOS 2.0 SP5 : mod_security (EulerOS-SA-2022-1332)
2022-03-21 00:00:00
Debian DLA-3031-1 : modsecurity-apache - LTS security update
2022-05-29 00:00:00
mageia
mageia
Updated apache-mod_security packages fix security vulnerability
2021-12-22 02:27:37
githubexploit
githubexploit
Exploit for Uncontrolled Recursion in Trustwave Modsecurity
2022-11-20 18:01:34
openvas
openvas
Huawei EulerOS: Security Advisory for mod_security (EulerOS-SA-2022-1332)
2022-03-21 00:00:00
Huawei EulerOS: Security Advisory for mod_security (EulerOS-SA-2022-1355)
2022-03-29 00:00:00
Mageia: Security Advisory (MGASA-2021-0576)
2022-01-28 00:00:00
debian
debian
[SECURITY] [DLA 3031-1] modsecurity-apache security update
2022-05-28 07:43:20
[SECURITY] [DSA 5023-1] modsecurity-apache security update
2021-12-18 13:15:31
osv
osv
modsecurity-apache - security update
2022-05-28 00:00:00
CVE-2021-42717
2021-12-07 22:15:06
BIT-modsecurity2-2021-42717
2024-03-06 10:57:12
f5
f5
K50839343 : NGINX ModSecurity WAF vulnerability CVE-2021-42717
2021-12-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-42717
2021-12-07 00:00:00
cve
cve
CVE-2021-42717
2021-12-07 22:15:00
prion
prion
Design/Logic Flaw
2021-12-07 22:15:00
debiancve
debiancve
CVE-2021-42717
2021-12-07 22:15:00
ubuntu
ubuntu
ModSecurity vulnerabilities
2023-09-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00