USN-5212-1

Dashboard / Vulnerabilities / USN-5212-1

USN-5212-1

Summary: apache2 vulnerabilities

Details: It was discovered that the Apache HTTP Server incorrectly handled certain forward proxy requests. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly perform a Server Side Request Forgery attack. (CVE-2021-44224) It was discovered that the Apache HTTP Server Lua module incorrectly handled memory in the multipart parser. A remote attacker could use this issue to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2021-44790)

References: https://ubuntu.com/security/notices/USN-5212-1, https://ubuntu.com/security/CVE-2021-44224, https://ubuntu.com/security/CVE-2021-44790