cve/2021/CVE-2021-36160.md

CVE-2021-36160

Description

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

POC

Reference

• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/PierreChrd/py-projet-tut
• https://github.com/Totes5706/TotesHTB
• https://github.com/jkiala2/Projet_etude_M1