cve/2021/CVE-2021-41524.md

CVE-2021-41524

Description

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project.

POC

Reference

• https://www.oracle.com/security-alerts/cpujan2022.html

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/Farrhouq/Inpt-report
• https://github.com/NeoOniX/5ATTACK
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/pedr0alencar/vlab-metasploitable2