Lucene search

K
cvelistApacheCVELIST:CVE-2020-13950
HistoryJun 10, 2021 - 7:10 a.m.

CVE-2020-13950 mod_proxy_http NULL pointer dereference

2021-06-1007:10:21
apache
raw.githubusercontent.com
4

6.1 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service