A flaw was found in mod_cgid. If a server using mod_cgid hosted CGI scripts which did not consume standard input, a remote attacker could cause child processes to hang indefinitely, leading to denial of service.

CPENameOperatorVersion
apache httpdeq2.4.9
apache httpdeq2.4.7
apache httpdeq2.4.6
apache httpdeq2.4.4
apache httpdeq2.4.3
apache httpdeq2.4.2
apache httpdeq2.4.1

Name	Operator	Version
apache httpd	eq	2.4.9
apache httpd	eq	2.4.7
apache httpd	eq	2.4.6
apache httpd	eq	2.4.4
apache httpd	eq	2.4.3
apache httpd	eq	2.4.2
apache httpd	eq	2.4.1

debiancve 1

prion 1

httpd 1

ubuntucve 1

cve 1

nessus 45

debian 3

openvas 31

mageia 2

veracode 3

amazon 2

oraclelinux 3

osv 2

redhat 7

centos 2

ibm 8

securityvulns 7

hackerone 2

suse 5

fedora 2

freebsd 2

gentoo 1

ubuntu 1

slackware 1

f5 1

oracle 1

debiancve

CVE-2014-0231

2014-07-20 11:12:00

prion

Cross site request forgery (csrf)

2014-07-20 11:12:00

httpd

Apache Httpd < 2.2.29 : mod_cgid denial of service

2014-06-16 00:00:00

ubuntucve

CVE-2014-0231

2014-07-20 00:00:00

cve

CVE-2014-0231

2014-07-20 11:12:00

nessus

Scientific Linux Security Update : httpd on SL5.x, SL6.x i386/x86_64 (20140723)

2014-07-24 00:00:00

CentOS 5 / 6 : httpd (CESA-2014:0920)

2014-07-24 00:00:00

Amazon Linux AMI : httpd (ALAS-2014-388)

2014-10-12 00:00:00

debian

[SECURITY] [DSA 2989-1] apache2 security update

2014-07-24 22:19:45

[SECURITY] [DSA 2989-1] apache2 security update

2014-07-24 22:19:45

[SECURITY] [DLA 66-1] apache2 security update

2014-09-29 13:40:41

openvas

RedHat Update for httpd RHSA-2014:0920-01

2014-07-28 00:00:00

Mageia: Security Advisory (MGASA-2014-0304)

2022-01-28 00:00:00

CentOS Update for httpd CESA-2014:0920 centos5

2014-07-28 00:00:00

mageia

Updated apache package fixes security vulnerabilities

2014-07-30 01:30:55

Updated apache package fixes security vulnerabilities

2014-07-30 01:30:55

veracode

Denial Of Service (DoS)

2019-05-02 05:03:41

Denial Of Service (DoS)

2019-05-02 05:03:42

Denial Of Service (DoS)

2019-05-02 05:03:43

amazon

Important: httpd

2014-07-31 13:54:00

Important: httpd24

2014-07-31 13:56:00

oraclelinux

httpd security update

2014-07-23 00:00:00

httpd security update

2014-07-23 00:00:00

httpd24-httpd security and bug fix update

2016-02-04 00:00:00

osv

apache2 - security update

2014-07-24 00:00:00

apache2 - security update

2014-09-29 00:00:00

redhat

(RHSA-2014:0920) Important: httpd security update

2014-07-23 00:00:00

(RHSA-2014:0922) Important: httpd24-httpd security update

2014-07-23 00:00:00

(RHSA-2014:1088) Important: Red Hat JBoss Web Server 2.1.0 update

2014-08-21 00:00:00

centos

httpd, mod_ssl security update

2014-07-23 15:12:33

httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update

2014-07-23 15:36:55

ibm

Security Bulletin: Vulnerabilities in httpd affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance

2018-06-17 22:30:11

Security Bulletin: Vulnerabilities in Apache affect the IBM Flex System Manager (FSM): (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

2019-01-31 01:35:01

Security Bulletin: Network Intrusion Prevention System is affected by multiple Apache web server vulnerabilities (CVE-2013-6438, CVE-2014-0098, CVE-2014-0226, CVE-2014-0231)

2022-02-23 19:21:55

securityvulns

Apache multiple security vulnerabilities

2014-07-28 00:00:00

EMC RSA Certificate Manager / Registration Manager multiple security vulnerabilities

2015-03-16 00:00:00

[USN-2299-1] Apache HTTP Server vulnerabilities

2014-07-28 00:00:00

hackerone

Boozt Fashion AB: Instance of Apache Vulnerable to Several Issues

2016-09-08 15:44:15

Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)

2015-06-09 17:47:58

suse

Security update for apache2 (important)

2014-09-02 19:04:20

Security update for apache2 (important)

2014-09-02 20:04:23

Security update for the Apache Web Server (important)

2014-08-07 01:04:17

fedora

[SECURITY] Fedora 19 Update: httpd-2.4.10-1.fc19

2014-08-15 02:47:11

[SECURITY] Fedora 20 Update: httpd-2.4.10-1.fc20

2014-07-25 10:03:52

freebsd

apache22 -- several vulnerabilities

2014-07-19 00:00:00

apache24 -- several vulnerabilities

2014-07-15 00:00:00

gentoo

Apache: Multiple vulnerabilities

2015-04-11 00:00:00

ubuntu

Apache HTTP Server vulnerabilities

2014-07-23 00:00:00

slackware

[slackware-security] httpd

2014-07-24 01:35:41

SOL15893 - Apache HTTP server vulnerabilities CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, and CVE-2014-3523

2014-12-04 00:00:00

oracle

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.247 Low

EPSS

Percentile

96.6%

JSON

Related for HTTPD:A158A6C24B676357DB136BEF8DE76E9B