Launchpad.net

CVE 2021-26691

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

CVE-2021-26691 (Candidate) is related to these bugs:

Bug #1960765: CVE-2021-26691 / CVE-2021-39275 / CVE-2021-44790: apache / httpd multiple CVEs

Summary				In	Importance	Status
	1960765	CVE-2021-26691 / CVE-2021-39275 / CVE-2021-44790: apache / httpd multiple CVEs		StarlingX	Medium	Fix Released

Bug #1969363: CVE-2022-22720: httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling

Summary				In	Importance	Status
	1969363	CVE-2022-22720: httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling		StarlingX	Medium	Fix Released

See the

CVE page on Mitre.org for more details.