Lucene search
Ubuntu.comUB:CVE-2014-0098HistoryMar 18, 2014 - 12:00 a.m.
CVE-2014-0098
2014-03-1800:00:00
ubuntu.com
ubuntu.com
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.224 Low
EPSS
Percentile
96.4%
The log_cookie function in mod_log_config.c in the mod_log_config module in
the Apache HTTP Server before 2.4.8 allows remote attackers to cause a
denial of service (segmentation fault and daemon crash) via a crafted
cookie that is not properly handled during truncation.
Notes
| Author | Note |
|---|---|
| mdeslaur | lucid has different code and doesnβt look vulnerable |
Related
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)
2014-04-02 00:00:00
prion
prion
Information disclosure
2014-03-18 05:18:00
nessus
nessus
IBM HTTP Server 8.5.0.0 <= 8.5.5.1 / 8.0.0.0 <= 8.0.0.8 / 7.0.0.0 <= 7.0.0.31 / 6.1.0.0 <= 6.1.0.47 (242057)
2020-12-15 00:00:00
Fedora 20 : httpd-2.4.9-2.fc20 (2014-4555)
2014-03-31 00:00:00
Amazon Linux AMI : httpd24 (ALAS-2014-309)
2014-03-28 00:00:00
cve
cve
CVE-2014-0098
2014-03-18 05:18:00
httpd
httpd
Apache Httpd < 2.2.27 : mod_log_config crash
2014-02-25 00:00:00
Apache Httpd < 2.4.9 : mod_log_config crash
2014-02-25 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 20 Update: httpd-2.4.9-2.fc20
2014-03-31 02:16:57
[SECURITY] Fedora 19 Update: httpd-2.4.9-1.fc19
2014-04-23 04:33:29
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:58:46
openvas
openvas
Fedora Update for httpd FEDORA-2014-4555
2014-04-03 00:00:00
Fedora Update for httpd FEDORA-2014-4555
2014-04-03 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-309)
2015-09-08 00:00:00
f5
f5
K15320 : Apache vulnerability CVE-2014-0098
2014-12-12 00:00:00
SOL15320 - Apache vulnerability CVE-2014-0098
2014-06-05 00:00:00
amazon
amazon
Medium: httpd24
2014-03-24 23:33:00
Medium: httpd
2014-04-25 16:00:00
debiancve
debiancve
CVE-2014-0098
2014-03-18 05:18:00
kaspersky
kaspersky
KLA10067 DoS vulnerabilities in Apache httpd
2014-03-26 00:00:00
oraclelinux
oraclelinux
httpd security update
2014-04-03 00:00:00
httpd security update
2014-04-03 00:00:00
redhat
redhat
(RHSA-2014:0369) Moderate: httpd security update
2014-04-03 00:00:00
(RHSA-2014:0370) Moderate: httpd security update
2014-04-03 00:00:00
securityvulns
securityvulns
Apache security vulnerabilities
2014-03-24 00:00:00
[ MDVSA-2014:065 ] apache
2014-03-24 00:00:00
APPLE-SA-2014-10-16-1 OS X Yosemite v10.10
2014-10-18 00:00:00
threatpost
threatpost
Apache Update Resolves Security Vulnerabilities
2014-03-18 12:51:25
seebug
seebug
Apache HTTP Serverε€δΈͺζη»ζε‘ζΌζ΄
2014-03-20 00:00:00
slackware
slackware
[slackware-security] httpd
2014-03-28 22:54:00
centos
centos
httpd, mod_ssl security update
2014-04-04 00:08:57
httpd, mod_ssl security update
2014-04-04 00:04:54
freebsd
freebsd
apache -- several vulnerabilities
2014-02-25 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2014-03-19 21:40:14
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2014-03-24 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2014-08-29 00:00:00
suse
suse
Security update for the Apache Web Server (important)
2014-08-07 01:04:17
Security update for apache2 (important)
2014-09-02 19:04:20
Security update for apache2 (important)
2014-09-02 20:04:23
hackerone
hackerone
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
2015-06-09 17:47:58
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - July 2014
2014-07-15 00:00:00
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.224 Low
EPSS
Percentile
96.4%
Related for UB:CVE-2014-0098