← Database

CVE-2021-41524

HIGH CVSS: 7.5 Published: 2021-10-05 Modified: 2026-06-17

Description

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.

Affected Platforms

Apache Http ServerOracle Instantis EnterprisetrackFedoraproject FedoraNetapp Cloud Backup

Weakness Type

CWE-476, CWE-476

References