CVE-2021-26690

A NULL pointer dereference was found in Apache httpd mod_session. The highest threat from this vulnerability is to system availability.

This is a null pointer deference caused when using mod_session. It can result in crash of httpd child process by a remote attacker.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Only configurations which use the "SessionEnv" directive (which is not widely used) are vulnerable to this flaw. SessionEnv is not enabled in default configuration of httpd package shipped with Red Hat Products.