3 matches found
httpd: mod_lua: Use of uninitialized value of in r:parsebody
A flaw was found in the modlua module of httpd. A crafted request body can cause a read to a random memory area due to an uninitialized value in functions called by the parsebody function. The highest threat from this vulnerability is to system availability...
httpd: mod_lua: DoS in r:parsebody
A flaw was found in the modlua module of httpd. A malicious request to a Lua script that calls parsebody0 can lead to a denial of service due to no default limit on the possible input size...
mod_lua Use of uninitialized value of in r:parsebody
...