CVE-2021-34798CWE-476

NULL pointer dereference in httpd core

published September 16, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
65%
Percentile
99.2
In the wild
Unconfirmed
What it is

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.64509 · 99.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-09-16T14:40Z
EPSS history
Timeline
  • 16 SEP 14:40Z
    NULL pointer dereference in httpd core
    cvelistv5