[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 09 Jun 2021 23:11:00 +0200
From: Christophe JAILLET <jailletc36@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2021-26691: Apache httpd: mod_session response handling heap overflow
CVE-2021-26691: mod_session response handling heap overflow
Severity: low
Vendor: The Apache Software Foundation
Versions Affected:
httpd 2.4.0 to 2.4.46
Description:
Apache HTTP Server 2.4.0 to 2.4.46
A specially crafted SessionHeader sent by an origin server could cause a heap overflow
Mitigation:
None
Credit:
Discovered internally by Christophe Jaillet
References:
https://httpd.apache.org/security/vulnerabilities_24.html
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
