Security Advisory

CVE-2021-41524

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-05 08:40:11
Last updated 2024-08-04 03:15:28
Assigner apache
State PUBLISHED

Description

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.