Description

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

Remediation

References

CVE-2021-44790

Related Vulnerabilities

Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.3)

WordPress Plugin Ultimate Instagram Feed Cross-Site Scripting (1.2)

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2018-8004)

WordPress Plugin Custom Fields Search by BestWebSoft Cross-Site Scripting (1.3.1)

WordPress Plugin WooCommerce Upload Files Arbitrary File Upload (59.3)

Severity

Critical

Classification

CVE-2021-44790 CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities