CVE-2021-36160

Related Vulnerabilities: CVE-2021-36160  

An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.

Description

An out-of-bounds read in mod_proxy_uwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability.

Additional Information

  • Bugzilla 2005124: CVE-2021-36160 httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path
  • CWE-125: Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2021-36160