Description

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

Remediation

References

CVE-2021-26691

Related Vulnerabilities

WordPress Plugin PropertyHive Cross-Site Scripting (1.4.14)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-7133)

WordPress 3.5.1 Multiple Vulnerabilities (2.0 - 3.5.1)

Oracle HTTP Server CVE-2016-0671 Vulnerability (CVE-2016-0671)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-2578)

Severity

Critical

Classification

CVE-2021-26691 CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities