Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
446
VMScore

CVE-2021-42697

Published: 02/11/2021 Updated: 13/06/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Http Server

Vulnerability Summary

Akka HTTP 10.1.x prior to 10.1.15 and 10.2.x prior to 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote malicious user to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

akka http server

References

https://doc.akka.io/docs/akka-http/current/security/2021-CVE-2021-42697-stack-overflow-parsing-user-agent.htmlhttps://akka.io/blog/https://akka.io/blog/news/2021/11/02/akka-http-10.2.7-releasedhttps://akka.io/blog/news/2021/11/22/akka-http-10.1.15-releasedhttp://packetstormsecurity.com/files/167018/Akka-HTTP-10.1.14-Denial-Of-Service.htmlhttps://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook