A flaw was found in mod_log_config. A remote attacker could send a specific truncated cookie causing a crash. This crash would only be a denial of service if using a threaded MPM.

CPENameOperatorVersion
apache httpdeq2.2.26
apache httpdeq2.2.25
apache httpdeq2.2.24
apache httpdeq2.2.23
apache httpdeq2.2.22
apache httpdeq2.2.21
apache httpdeq2.2.20
apache httpdeq2.2.19
apache httpdeq2.2.18
apache httpdeq2.2.17

Name	Operator	Version
apache httpd	eq	2.2.26
apache httpd	eq	2.2.25
apache httpd	eq	2.2.24
apache httpd	eq	2.2.23
apache httpd	eq	2.2.22
apache httpd	eq	2.2.21
apache httpd	eq	2.2.20
apache httpd	eq	2.2.19
apache httpd	eq	2.2.18
apache httpd	eq	2.2.17

Rows per page:

1-10 of 251

checkpoint_advisories 1

prion 1

nessus 44

cve 1

ibm 13

fedora 2

veracode 1

openvas 33

f5 2

httpd 1

debiancve 1

amazon 2

ubuntucve 1

kaspersky 1

oraclelinux 2

securityvulns 8

mageia 1

redhat 6

threatpost 1

seebug 1

slackware 1

freebsd 1

centos 2

ubuntu 1

gentoo 1

suse 5

hackerone 2

oracle 2

checkpoint_advisories

Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)

2014-04-02 00:00:00

prion

Information disclosure

2014-03-18 05:18:00

nessus

IBM HTTP Server 8.5.0.0 <= 8.5.5.1 / 8.0.0.0 <= 8.0.0.8 / 7.0.0.0 <= 7.0.0.31 / 6.1.0.0 <= 6.1.0.47 (242057)

2020-12-15 00:00:00

Fedora 20 : httpd-2.4.9-2.fc20 (2014-4555)

2014-03-31 00:00:00

Amazon Linux AMI : httpd24 (ALAS-2014-309)

2014-03-28 00:00:00

cve

CVE-2014-0098

2014-03-18 05:18:00

ibm

Security Bulletin: IBM QRadar SIEM 7.1 MR2, 7.2 MR2, and 7.0 MR5 uses an Apache HTTP Server which contains a denial of service vulnerability (CVE-2014-0098)

2018-06-16 21:18:28

Security Bulletin: Rational Build Forge Security Advisory (CVE-2014-0098)

2018-06-17 04:53:16

Security Bulletin: Potential Denial of Service in IBM HTTP Server CVE-2014-0098

2018-06-15 06:59:47

fedora

[SECURITY] Fedora 20 Update: httpd-2.4.9-2.fc20

2014-03-31 02:16:57

[SECURITY] Fedora 19 Update: httpd-2.4.9-1.fc19

2014-04-23 04:33:29

veracode

Denial Of Service (DoS)

2019-05-02 04:58:46

openvas

Fedora Update for httpd FEDORA-2014-4555

2014-04-03 00:00:00

Fedora Update for httpd FEDORA-2014-4555

2014-04-03 00:00:00

Amazon Linux: Security Advisory (ALAS-2014-309)

2015-09-08 00:00:00

K15320 : Apache vulnerability CVE-2014-0098

2014-12-12 00:00:00

SOL15320 - Apache vulnerability CVE-2014-0098

2014-06-05 00:00:00

httpd

Apache Httpd < 2.4.9 : mod_log_config crash

2014-02-25 00:00:00

debiancve

CVE-2014-0098

2014-03-18 05:18:00

amazon

Medium: httpd24

2014-03-24 23:33:00

Medium: httpd

2014-04-25 16:00:00

ubuntucve

CVE-2014-0098

2014-03-18 00:00:00

kaspersky

KLA10067 DoS vulnerabilities in Apache httpd

2014-03-26 00:00:00

oraclelinux

httpd security update

2014-04-03 00:00:00

httpd security update

2014-04-03 00:00:00

securityvulns

[ MDVSA-2014:065 ] apache

2014-03-24 00:00:00

Apache security vulnerabilities

2014-03-24 00:00:00

APPLE-SA-2014-10-16-1 OS X Yosemite v10.10

2014-10-18 00:00:00

mageia

Updated apache packages fix security vulnerabilities

2014-03-19 21:40:14

redhat

(RHSA-2014:0369) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0370) Moderate: httpd security update

2014-04-03 00:00:00

(RHSA-2014:0783) Moderate: Red Hat JBoss Web Server 2.0.1 httpd security and bug fix update

2014-06-23 17:50:43

threatpost

Apache Update Resolves Security Vulnerabilities

2014-03-18 12:51:25

seebug

Apache HTTP Server多个拒绝服务漏洞

2014-03-20 00:00:00

slackware

[slackware-security] httpd

2014-03-28 22:54:00

freebsd

apache -- several vulnerabilities

2014-02-25 00:00:00

centos

httpd, mod_ssl security update

2014-04-04 00:08:57

httpd, mod_ssl security update

2014-04-04 00:04:54

ubuntu

Apache HTTP Server vulnerabilities

2014-03-24 00:00:00

gentoo

Apache HTTP Server: Multiple vulnerabilities

2014-08-29 00:00:00

suse

Security update for apache2 (important)

2014-09-02 19:04:20

Security update for the Apache Web Server (important)

2014-08-07 01:04:17

Security update for apache2 (important)

2014-09-02 20:04:23

hackerone

Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

2015-06-09 17:47:58

U.S. Dept Of Defense: Out-of-date Version (Apache)

2016-11-24 15:09:27

oracle

Oracle Critical Patch Update - July 2014

2014-07-15 00:00:00

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.224 Low

EPSS

Percentile

96.4%

JSON

Related for HTTPD:423307886E19F2012B809EEB1E9C6846