UpHeron
All vulnerabilities

Servers and applications

CVE-2021-31618

Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2…

Severity
High 7.5
Published
15 Jun 2021
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Version 1.15.17
  • Version 2.4.47

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-31618
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-31618