CVE-2021-34798

—

CVSS 3.1

7.5 high

EPSS

65%p99

Published

Sep 16, 2021 (Sep 16, 2021)

Modified

Jun 17, 2026

Description

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

Vendors: apache fedoraproject debian netapp tenable oracle broadcom siemens
Products: http server, fedora, debian linux, cloud backup, clustered data ontap, storagegrid, tenable.sc, communications cloud native core network function cloud native environment, enterprise manager base platform, instantis enterprisetrack, peoplesoft enterprise peopletools, zfs storage appliance kit
Weakness: CWE-476
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (64.5%)

In the news0 stories

No ingested article mentions this CVE yet.