Lucene search
K

11634 matches found

OSV
OSV
added 2021/06/15 9:15 a.m.1 views

ALPINE-CVE-2021-31618

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

7.5CVSS7.2AI score0.51208EPSS
Exploits0References1
Prion
Prion
added 2021/06/15 9:15 a.m.38 views

Null pointer dereference

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

5CVSS7.4AI score0.51208EPSS
Exploits0References12Affected Software6
UbuntuCve
UbuntuCve
added 2021/06/15 9:15 a.m.54 views

CVE-2021-31618

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

7.5CVSS7.1AI score0.51208EPSS
Exploits0References2
CVE
CVE
added 2021/06/15 12:0 a.m.694 views

CVE-2021-31618

CVE-2021-31618 affects the Apache httpd mod_http2 component. The issue is a NULL pointer dereference in the HTTP/2 header handling when size limits are violated, leading to denial of service by crashing the httpd worker process. Affected releases include mod_http2 1.15.17 and Apache httpd 2.4.47 ...

7.5CVSS7.7AI score0.51208EPSS
In wildExploits0References13Affected Software1
Packet Storm
Packet Storm
added 2021/06/15 12:0 a.m.121 views

Sami HTTP Server 2.0 Denial Of Service

!/usr/bin/perl -w Date: 06/14/2021 14 Jun Version Vulnerable: Sami HTTP 2.0 OS Tested: Windows XP PACK 3 Brazilian use IO::Socket; $sis="$^O"; print $sis; if $sis eq "windows" $cmd="cls"; else $cmd="clear"; system"$cmd"; if !$ARGV0 || !$ARGV1 &apresentacao; exit; sub apresentacao print q Sami HTT...

7.4AI score
Exploits0
Vulnrichment
Vulnrichment
added 2021/06/15 12:0 a.m.32 views

CVE-2021-31618 NULL pointer dereference on specially crafted HTTP/2 request

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

6.8AI score0.51208EPSS
Exploits0References13
Debian CVE
Debian CVE
added 2021/06/15 12:0 a.m.54 views

CVE-2021-31618

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

7.5CVSS7.7AI score0.51208EPSS
Exploits0
Cvelist
Cvelist
added 2021/06/15 12:0 a.m.167 views

CVE-2021-31618 NULL pointer dereference on specially crafted HTTP/2 request

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

8.8AI score0.51208EPSS
Exploits0References13
AlpineLinux
AlpineLinux
added 2021/06/15 12:0 a.m.61 views

CVE-2021-31618

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating...

7.5CVSS7.9AI score0.51208EPSS
Exploits0
Veracode
Veracode
added 2021/06/13 10:57 p.m.26 views

Privilege Escalation

Apache HTTP Server is vulnerable to privilege escalation. Unprivileged local users can stop httpd on Windows...

5.5CVSS2.5AI score0.11773EPSS
Exploits0References14Affected Software1
Veracode
Veracode
added 2021/06/13 10:29 a.m.26 views

Denial Of Service(DoS)

Apache HTTP Server is vulnerable to denial of service due to an unexpected matching behavior with 'MergeSlashes OFF'...

5.3CVSS0.6AI score0.52331EPSS
Exploits0References17Affected Software19
Veracode
Veracode
added 2021/06/13 9:33 a.m.33 views

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. The modproxyhttp can be made to crash via a NULL pointer dereference via malicious requests using both Content-Length and Transfer-Encoding headers...

7.5CVSS1.7AI score0.49089EPSS
Exploits0References15Affected Software14
Veracode
Veracode
added 2021/06/13 8:39 a.m.87 views

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. A stack overflow in modauthdigest allows an attacker to crash the application...

7.3CVSS2AI score0.53191EPSS
Exploits0References17Affected Software20
Veracode
Veracode
added 2021/06/13 3:24 a.m.38 views

Denial Of Service(DoS)

Apache HTTP Server is vulnerable to denial of service.A specially crafted Cookie header handled by modsession can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service...

7.5CVSS1.1AI score0.65067EPSS
Exploits0References17Affected Software19
Veracode
Veracode
added 2021/06/13 3:24 a.m.197 views

Denial Of Service (DoS)

Apache HTTP Server is vulnerable to denial of service. An attacker is able to crash the server via a malicious SessionHeader sent by an origin server...

9.8CVSS1.2AI score0.68067EPSS
Exploits0References18Affected Software20
CNVD
CNVD
added 2021/06/11 12:0 a.m.71 views

Apache HTTP Server Code Issue Vulnerability (CNVD-2022-13199)

Apache HTTP Server is an open source web server from the Apache Foundation. The server is fast, reliable, and extensible via a simple API.A code issue vulnerability exists in Apache HTTP Server, which stems from a NULL pointer dereference error in mod sessions. A remote attacker could use this...

7.5CVSS1.9AI score0.65067EPSS
Exploits0References1
NVD
NVD
added 2021/06/10 7:15 a.m.37 views

CVE-2021-26690

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by modsession can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service...

7.5CVSS0.65067EPSS
Exploits0References12
NVD
NVD
added 2021/06/10 7:15 a.m.19 views

CVE-2020-13938

Apache HTTP Server versions 2.4.0 to 2.4.46 Unprivileged local users can stop httpd on Windows...

5.5CVSS0.11773EPSS
Exploits0References7
OSV
OSV
added 2021/06/10 7:15 a.m.2 views

ALPINE-CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 modproxyhttp can be made to crash NULL pointer dereference with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service...

7.5CVSS6.9AI score0.49089EPSS
Exploits0References1
OSV
OSV
added 2021/06/10 7:15 a.m.4 views

ALPINE-CVE-2021-30641

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'...

5.3CVSS7AI score0.52331EPSS
Exploits0References1
Rows per page
Query Builder