Not rated
CVE-2021-34798 Malformed requests may cause the server to dereference a NULL pointer
Description
Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server 2.4 | earliest → 2.4.48 | No fix stated |
References
- httpd.apache.org httpd.apache.org
- FEDORA-2021-dce7e7738e lists.fedoraproject.org
- [httpd-users] 20210923 [users@httpd] 2.4.49 security fixes: more info lists.apache.org
- [httpd-users] 20210923 Re: [users@httpd] 2.4.49 security fixes: more info lists.apache.org
- [httpd-users] 20210923 [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info lists.apache.org
- [httpd-users] 20210923 Re: [users@httpd] Re: [External] : [users@httpd] 2.4.49 security fixes: more info lists.apache.org
- FEDORA-2021-e3f6dd670d lists.fedoraproject.org
- [debian-lts-announce] 20211002 [SECURITY] [DLA 2776-1] apache2 security update lists.debian.org
- DSA-4982 www.debian.org
- 20211124 Multiple Vulnerabilities in Apache HTTP Server Affecting Cisco Products: November 2021 tools.cisco.com
- www.oracle.com www.oracle.com
- www.tenable.com www.tenable.com
- security.netapp.com security.netapp.com
- kc.mcafee.com kc.mcafee.com
- www.oracle.com www.oracle.com
- cert-portal.siemens.com cert-portal.siemens.com
- GLSA-202208-20 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of Apache HTTP Server
The 139 CVEs of Apache HTTP Server →
CVE-2026-63686
A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all…
Not rated
CVE-2026-93546
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write…
Not rated
CVE-2026-79768
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when…
Not rated
CVE-2026-73637
Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows…
Not rated