Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
f5F5F5:K56331254
HistoryNov 05, 2021 - 12:00 a.m.

K56331254 : Apache HTTP server vulnerability CVE-2021-41524

2021-11-0500:00:00
my.f5.com
26

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

76.1%

JSON

Security Advisory Description

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project. (CVE-2021-41524)

Impact

There is no impact; F5 products are not affected by this vulnerability.

Related

osv 2
httpd 1
cbl_mariner 1
ubuntucve 1
prion 1
veracode 1
cnvd 1
cve 1
alpinelinux 1
redhatcve 1
debiancve 1
nessus 7
openvas 6
mageia 1
fedora 2
altlinux 2
slackware 1
kaspersky 1
hivepro 1
thn 1
freebsd 1
photon 2
malwarebytes 1
cisco 1
redhat 2
amazon 2
gentoo 1
oracle 1
osv
osv
CVE-2021-41524
2021-10-05 09:15:07
BIT-apache-2021-41524
2024-03-06 10:54:53
httpd
httpd
Apache Httpd < 2.4.50 : null pointer dereference in h2 fuzzing
2021-10-04 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-41524 affecting package httpd 2.4.49-1
2021-10-15 04:46:31
ubuntucve
ubuntucve
CVE-2021-41524
2021-10-05 00:00:00
prion
prion
Null pointer dereference
2021-10-05 09:15:00
veracode
veracode
Denial Of Service (DoS)
2021-10-06 09:50:40
cnvd
cnvd
Apache HTTP Server Denial of Service Vulnerability (CNVD-2022-09237)
2021-10-10 00:00:00
cve
cve
CVE-2021-41524
2021-10-05 09:15:00
alpinelinux
alpinelinux
CVE-2021-41524
2021-10-05 09:15:00
redhatcve
redhatcve
CVE-2021-41524
2021-10-05 17:08:31
debiancve
debiancve
CVE-2021-41524
2021-10-05 09:15:00
nessus
nessus
Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities
2021-10-06 00:00:00
Apache 2.4.49 < 2.4.50 Multiple Vulnerabilities
2021-10-05 00:00:00
FreeBSD : Apache httpd -- Multiple vulnerabilities (25b78bdd-25b8-11ec-a341-d4c9ef517024)
2021-10-06 00:00:00
openvas
openvas
Apache HTTP Server 2.4.49 Multiple Vulnerabilities - Linux
2021-10-05 00:00:00
Slackware: Security Advisory (SSA:2021-278-01)
2022-04-21 00:00:00
Fedora: Security Advisory for httpd (FEDORA-2021-f94985afca)
2021-10-30 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2021-10-06 17:38:41
fedora
fedora
[SECURITY] Fedora 34 Update: httpd-2.4.50-1.fc34
2021-10-07 17:19:23
[SECURITY] Fedora 35 Update: httpd-2.4.50-1.fc35
2021-10-29 23:19:42
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 1:2.4.50-alt1
2021-10-07 00:00:00
Security fix for the ALT Linux 10 package apache2 version 1:2.4.50-alt1
2021-10-07 00:00:00
slackware
slackware
[slackware-security] httpd
2021-10-06 01:14:05
kaspersky
kaspersky
KLA12371 Multiple vulnerabilities in Apache HTTP Server
2021-10-04 00:00:00
hivepro
hivepro
Multiple vulnerabilities have been discovered in the Apache HTTP Server
2021-10-06 08:57:02
thn
thn
Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!
2021-10-05 14:53:00
freebsd
freebsd
Apache httpd -- Multiple vulnerabilities
2021-10-05 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2021-0118
2021-10-19 00:00:00
Critical Photon OS Security Update - PHSA-2021-4.0-0118
2021-10-20 00:00:00
malwarebytes
malwarebytes
[Updated, again] Apache fixes zero-day vulnerability in HTTP Server
2021-10-06 14:23:08
cisco
cisco
Apache HTTP Server Vulnerabilities: October 2021
2021-10-07 16:00:00
redhat
redhat
(RHSA-2022:7143) Moderate: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:05:14
(RHSA-2022:7144) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.51 security update
2022-10-26 20:04:31
amazon
amazon
Important: httpd24
2021-10-15 07:52:00
Important: httpd
2021-10-15 07:57:00
gentoo
gentoo
Apache HTTPD: Multiple Vulnerabilities
2022-08-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.006 Low

EPSS

Percentile

76.1%

JSON
Related for F5:K56331254
osv2httpd1cbl_mariner1ubuntucve1prion1veracode1cnvd1cve1alpinelinux1redhatcve1debiancve1nessus7openvas6mageia1fedora2altlinux2slackware1kaspersky1hivepro1thn1freebsd1photon2malwarebytes1cisco1redhat2amazon2gentoo1oracle1