← Database

CVE-2021-39275

CRITICAL CVSS: 9.8 Published: 2021-09-16 Modified: 2026-06-17

Description

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

Affected Platforms

Oracle Instantis EnterprisetrackSiemens Sinema ServerOracle Http ServerApache Http ServerNetapp StoragegridFedoraproject FedoraDebian Debian LinuxNetapp Clustered Data OntapSiemens Sinec NmsOracle Zfs Storage Appliance Kit

Weakness Type

CWE-787

References