CVE-2021-26690

mod_session NULL pointer dereference

published June 10, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
65%
Percentile
99.3
In the wild
Unconfirmed
What it is

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.65308 · 99.3th percentile
Published
2021-06-10T07:10Z
EPSS history
Timeline
  • 10 JUN 07:10Z
    mod_session NULL pointer dereference
    cvelistv5