Lucene search

K
httpdApache Team FoundationHTTPD:8EFEF9AED09575018B1942E8DC95B48B
HistorySep 14, 2013 - 12:00 a.m.

Apache Httpd < 2.4.7 : mod_cache crash

2013-09-1400:00:00
Apache Team Foundation
httpd.apache.org
19

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%

A NULL pointer dereference was found in mod_cache. A malicious HTTP server could cause a crash in a caching forward proxy configuration. (Note that this vulnerability was fixed in the 2.4.7 release, but the security impact was not disclosed at the time of the release.)

CPENameOperatorVersion
apache httpdeq2.4.6

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.041 Low

EPSS

Percentile

92.1%