CVE-2021-40540
Critical
Description
ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check for certain malformed HTTP requests.
SeverityCritical
CVSS9.8
Exploit probability—
ProductUlfius
PublishedSep 7, 2021
First seenSep 7, 2021
How to fix
Update
- ulfius_project ulfius2.7.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ulfius_project ulfius | v < 2.7.4 | 2.7.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.