Apache httpd mod_lua Integer Underflow

A integer underflow vulnerability exists in multiple versions of Apache Software Foundation httpd prior to 2.4.52. The flaw is due to improper handling of the request body. An unauthenticated remote attacker may sent a crafted request to the target server. Successful exploitation could result in remote code execution or denial of service condition. * Target Apached server must have the mod_lua module enabled and have the lua-script handler set for Lua scripts stored on the server. * The target must contain a Lua script utilizing the r:parsebody() function.