CVE-2021-33193
16.08.2021, 08:15
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.Enginsight
| Vendor | Product | Version |
|---|---|---|
| debian | debian_linux | 10.0 |
| apache | http_server | 2.4.17 ≤ 𝑥 < 2.4.49 |
| tenable | tenable.sc | 𝑥 ≤ 5.19.1 |
| oracle | secure_backup | 𝑥 < 18.1.0.1.0 |
| oracle | zfs_storage_appliance_kit | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References