CVE-2021-41524CWE-476

null pointer dereference in h2 fuzzing

published October 5, 2021

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25170 · 97.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-10-05T08:40Z
EPSS history
Timeline
  • 05 OCT 08:40Z
    null pointer dereference in h2 fuzzing
    cvelistv5