The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

OSVersionArchitecturePackageVersionFilename
Debian12allapache2< 2.4.9-1apache2_2.4.9-1_all.deb
Debian11allapache2< 2.4.9-1apache2_2.4.9-1_all.deb
Debian10allapache2< 2.4.9-1apache2_2.4.9-1_all.deb
Debian999allapache2< 2.4.9-1apache2_2.4.9-1_all.deb
Debian13allapache2< 2.4.9-1apache2_2.4.9-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	apache2	< 2.4.9-1	apache2_2.4.9-1_all.deb
Debian	11	all	apache2	< 2.4.9-1	apache2_2.4.9-1_all.deb
Debian	10	all	apache2	< 2.4.9-1	apache2_2.4.9-1_all.deb
Debian	999	all	apache2	< 2.4.9-1	apache2_2.4.9-1_all.deb
Debian	13	all	apache2	< 2.4.9-1	apache2_2.4.9-1_all.deb

checkpoint_advisories 1

prion 1

nessus 44

httpd 2

cve 1

ibm 13

fedora 2

veracode 1

openvas 33

f5 2

ubuntucve 1

amazon 2

kaspersky 1

oraclelinux 2

redhat 6

securityvulns 8

mageia 1

centos 2

ubuntu 1

threatpost 1

seebug 1

freebsd 1

slackware 1

gentoo 1

suse 5

hackerone 2

oracle 2

checkpoint_advisories

Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)

2014-04-02 00:00:00

prion

Information disclosure

2014-03-18 05:18:00

nessus

IBM HTTP Server 8.5.0.0 <= 8.5.5.1 / 8.0.0.0 <= 8.0.0.8 / 7.0.0.0 <= 7.0.0.31 / 6.1.0.0 <= 6.1.0.47 (242057)

2020-12-15 00:00:00

Fedora 20 : httpd-2.4.9-2.fc20 (2014-4555)

2014-03-31 00:00:00

Amazon Linux AMI : httpd24 (ALAS-2014-309)

2014-03-28 00:00:00

httpd

Apache Httpd < 2.2.27 : mod_log_config crash

2014-02-25 00:00:00

Apache Httpd < 2.4.9 : mod_log_config crash

2014-02-25 00:00:00

cve

CVE-2014-0098

2014-03-18 05:18:00

ibm

Security Bulletin: Rational Build Forge Security Advisory (CVE-2014-0098)

2018-06-17 04:53:16

Security Bulletin: IBM QRadar SIEM 7.1 MR2, 7.2 MR2, and 7.0 MR5 uses an Apache HTTP Server which contains a denial of service vulnerability (CVE-2014-0098)

2018-06-16 21:18:28

Security Bulletin: Potential Denial of Service in IBM HTTP Server CVE-2014-0098

2018-06-15 06:59:47

fedora

[SECURITY] Fedora 20 Update: httpd-2.4.9-2.fc20

2014-03-31 02:16:57

[SECURITY] Fedora 19 Update: httpd-2.4.9-1.fc19

2014-04-23 04:33:29

veracode

Denial Of Service (DoS)

2019-05-02 04:58:46

openvas

Fedora Update for httpd FEDORA-2014-4555

2014-04-03 00:00:00

Amazon Linux: Security Advisory (ALAS-2014-309)

2015-09-08 00:00:00

Fedora Update for httpd FEDORA-2014-4555

2014-04-03 00:00:00

K15320 : Apache vulnerability CVE-2014-0098

2014-12-12 00:00:00

SOL15320 - Apache vulnerability CVE-2014-0098

2014-06-05 00:00:00

ubuntucve

CVE-2014-0098

2014-03-18 00:00:00

amazon

Medium: httpd24

2014-03-24 23:33:00

Medium: httpd

2014-04-25 16:00:00

kaspersky

KLA10067 DoS vulnerabilities in Apache httpd

2014-03-26 00:00:00

oraclelinux

httpd security update

2014-04-03 00:00:00

httpd security update

2014-04-03 00:00:00

redhat

(RHSA-2014:0369) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0370) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0784) Moderate: Red Hat JBoss Web Server 2.0.1 httpd security and bug fix update

2014-06-23 17:51:29

securityvulns

Apache security vulnerabilities

2014-03-24 00:00:00

[ MDVSA-2014:065 ] apache

2014-03-24 00:00:00

APPLE-SA-2014-10-16-1 OS X Yosemite v10.10

2014-10-18 00:00:00

mageia

Updated apache packages fix security vulnerabilities

2014-03-19 21:40:14

centos

httpd, mod_ssl security update

2014-04-04 00:04:54

httpd, mod_ssl security update

2014-04-04 00:08:57

ubuntu

Apache HTTP Server vulnerabilities

2014-03-24 00:00:00

threatpost

Apache Update Resolves Security Vulnerabilities

2014-03-18 12:51:25

seebug

Apache HTTP Server多个拒绝服务漏洞

2014-03-20 00:00:00

freebsd

apache -- several vulnerabilities

2014-02-25 00:00:00

slackware

[slackware-security] httpd

2014-03-28 22:54:00

gentoo

Apache HTTP Server: Multiple vulnerabilities

2014-08-29 00:00:00

suse

Security update for apache2 (important)

2014-09-02 19:04:20

Security update for apache2 (important)

2014-09-02 20:04:23

Security update for the Apache Web Server (important)

2014-08-07 01:04:17

hackerone

Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

2015-06-09 17:47:58

U.S. Dept Of Defense: Out-of-date Version (Apache)

2016-11-24 15:09:27

oracle

Oracle Critical Patch Update - July 2014

2014-07-15 00:00:00

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.224 Low

EPSS

Percentile

96.4%

JSON

Related for DEBIANCVE:CVE-2014-0098