HTTP: Apache httpd mod_lua req_parsebody Integer Underflow

This signature detects attempts to exploit a known vulnerability against Apache httpd. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

Affected Products

Apache http_server

References

CVE: CVE-2021-44790

URL: https://httpd.apache.org/security/vulnerabilities_24.html#2.4.52

Short Name

HTTP:APACHE:HTTPD-MOD-LUA-OF

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Apache httpd mod_lua req_parsebody Integer Underflow

Extended Description

Affected Products

References

Found a potential security threat?