httpd: ap_find_token() buffer overread

A buffer over-read flaw was found in the httpd's apfindtoken function. A remote attacker could use this flaw to cause httpd child process to crash via a specially crafted HTTP request...

PT-2017-2868

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.2.32 through 2.4.24 Apache HTTP Server version 2.4.24 Description The issue arises from insufficient input validation during token list parsing in the ap find token function. This allows an attacker to potentially...