Description
In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2. Configurations affected are a reverse proxy is configured for an HTTP/2 backend, with ProxyPreserveHost set to "on".
Remediation
References
Related Vulnerabilities
IBM WebSEAL Insufficiently Protected Credentials Vulnerability (CVE-2021-20439)
WordPress Plugin CM Ad Changer Multiple Cross-Site Scripting Vulnerabilities (1.7.2)
MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7923)
MySQL CVE-2021-2172 Vulnerability (CVE-2021-2172)
WordPress Plugin WP Construction Mode Cross-Site Request Forgery (1.8)