NetSight
IP …
high7.5

CVE-2021-36160

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS).

Impact

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.4.30 before 2.4.49
FedoraprojectFedora
Versions 34, 35
DebianDebian Linux
Versions 9.0, 10.0, 11.0
NetappCloud Backup
All versions
NetappClustered Data Ontap
All versions
NetappStoragegrid
All versions
OracleCommunications Cloud Native Core Network Function Cloud Native Environment
Version 1.10.0
OracleEnterprise Manager Base Platform
Versions 13.4.0.0, 13.5.0.0
OracleHttp Server
Versions 12.2.1.3.0, 12.2.1.4.0
OracleInstantis Enterprisetrack
Versions 17.1, 17.2, 17.3
OraclePeoplesoft Enterprise Peopletools
Version 8.58
OracleZfs Storage Appliance Kit
Version 8.8

Weakness classification

CWE-125

References