Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0231HistoryJul 20, 2014 - 11:12 a.m.
CVE-2014-0231
2014-07-2011:12:00
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.247 Low
EPSS
Percentile
96.6%
The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | apache2 | < 2.4.10-1 | apache2_2.4.10-1_all.deb |
| Debian | 11 | all | apache2 | < 2.4.10-1 | apache2_2.4.10-1_all.deb |
| Debian | 10 | all | apache2 | < 2.4.10-1 | apache2_2.4.10-1_all.deb |
| Debian | 999 | all | apache2 | < 2.4.10-1 | apache2_2.4.10-1_all.deb |
| Debian | 13 | all | apache2 | < 2.4.10-1 | apache2_2.4.10-1_all.deb |
Related
prion
prion
Cross site request forgery (csrf)
2014-07-20 11:12:00
httpd
httpd
Apache Httpd < 2.2.29 : mod_cgid denial of service
2014-06-16 00:00:00
Apache Httpd < 2.4.10 : mod_cgid denial of service
2014-06-16 00:00:00
cve
cve
CVE-2014-0231
2014-07-20 11:12:00
ubuntucve
ubuntucve
CVE-2014-0231
2014-07-20 00:00:00
nessus
nessus
CentOS 5 / 6 : httpd (CESA-2014:0920)
2014-07-24 00:00:00
Amazon Linux AMI : httpd (ALAS-2014-388)
2014-10-12 00:00:00
debian
debian
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DLA 66-1] apache2 security update
2014-09-29 13:40:41
mageia
mageia
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
openvas
openvas
RedHat Update for httpd RHSA-2014:0920-01
2014-07-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0304)
2022-01-28 00:00:00
CentOS Update for httpd CESA-2014:0920 centos6
2014-07-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:41
Denial Of Service (DoS)
2019-05-02 05:03:42
Denial Of Service (DoS)
2019-05-02 05:03:43
amazon
amazon
Important: httpd
2014-07-31 13:54:00
Important: httpd24
2014-07-31 13:56:00
ibm
ibm
oraclelinux
oraclelinux
httpd security update
2014-07-23 00:00:00
httpd security update
2014-07-23 00:00:00
httpd24-httpd security and bug fix update
2016-02-04 00:00:00
osv
osv
apache2 - security update
2014-07-24 00:00:00
apache2 - security update
2014-09-29 00:00:00
redhat
redhat
(RHSA-2014:0920) Important: httpd security update
2014-07-23 00:00:00
(RHSA-2014:0922) Important: httpd24-httpd security update
2014-07-23 00:00:00
(RHSA-2014:0921) Important: httpd security update
2014-07-23 00:00:00
centos
centos
httpd, mod_ssl security update
2014-07-23 15:12:33
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2014-07-23 15:36:55
securityvulns
securityvulns
Apache multiple security vulnerabilities
2014-07-28 00:00:00
EMC RSA Certificate Manager / Registration Manager multiple security vulnerabilities
2015-03-16 00:00:00
ESA-2015-014: RSA® Digital Certificate Solution Multiple Vulnerabilities
2015-03-16 00:00:00
hackerone
hackerone
Boozt Fashion AB: Instance of Apache Vulnerable to Several Issues
2016-09-08 15:44:15
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
suse
suse
Security update for apache2 (important)
2014-09-02 19:04:20
Security update for the Apache Web Server (important)
2014-08-07 01:04:17
Security update for apache2 (important)
2014-09-02 20:04:23
fedora
fedora
[SECURITY] Fedora 19 Update: httpd-2.4.10-1.fc19
2014-08-15 02:47:11
[SECURITY] Fedora 20 Update: httpd-2.4.10-1.fc20
2014-07-25 10:03:52
freebsd
freebsd
apache22 -- several vulnerabilities
2014-07-19 00:00:00
apache24 -- several vulnerabilities
2014-07-15 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2015-04-11 00:00:00
slackware
slackware
[slackware-security] httpd
2014-07-24 01:35:41
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2014-07-23 00:00:00
f5
f5
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.247 Low
EPSS
Percentile
96.6%
Related for DEBIANCVE:CVE-2014-0231