Lucene search
Ubuntu.comUB:CVE-2014-0226HistoryJul 20, 2014 - 12:00 a.m.
CVE-2014-0226
2014-07-2000:00:00
ubuntu.com
ubuntu.com
39
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.956 High
EPSS
Percentile
99.4%
Race condition in the mod_status module in the Apache HTTP Server before
2.4.10 allows remote attackers to cause a denial of service (heap-based
buffer overflow), or possibly obtain sensitive credential information or
execute arbitrary code, via a crafted request that triggers improper
scoreboard handling within the status_handler function in
modules/generators/mod_status.c and the lua_ap_scoreboard_worker function
in modules/lua/lua_request.c.
Notes
| Author | Note |
|---|---|
| mdeslaur | PoC: http://seclists.org/fulldisclosure/2014/Jul/114 |
Related
debiancve
debiancve
CVE-2014-0226
2014-07-20 11:12:00
cve
cve
CVE-2014-0226
2014-07-20 11:12:00
httpd
httpd
Apache Httpd < 2.2.29 : mod_status buffer overflow
2014-05-30 00:00:00
Apache Httpd < 2.4.10 : mod_status buffer overflow
2014-05-30 00:00:00
zdi
zdi
ibm
ibm
packetstorm
packetstorm
Apache Scoreboard / Status Race Condition
2014-07-21 00:00:00
prion
prion
Race condition
2014-07-20 11:12:00
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_status Heap Buffer Overflow (CVE-2014-0226)
2014-08-06 00:00:00
zdt
zdt
Apache 2.4.7 httpd mod_status Heap Buffer Overflow Vulnerability
2014-07-20 00:00:00
hackerone
hackerone
Pornhub: SSRF & XSS (W3 Total Cache)
2016-05-14 01:22:59
Boozt Fashion AB: Instance of Apache Vulnerable to Several Issues
2016-09-08 15:44:15
debian
debian
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DSA 2989-1] apache2 security update
2014-07-24 22:19:45
[SECURITY] [DLA 66-1] apache2 security update
2014-09-29 13:40:41
nessus
nessus
Oracle Linux 5 / 6 : httpd (ELSA-2014-0920)
2014-07-24 00:00:00
GLSA-201408-12 : Apache HTTP Server: Multiple vulnerabilities
2014-08-30 00:00:00
Amazon Linux AMI : httpd (ALAS-2014-388)
2014-10-12 00:00:00
openvas
openvas
CentOS Update for httpd CESA-2014:0920 centos6
2014-07-28 00:00:00
CentOS Update for httpd CESA-2014:0920 centos5
2014-07-28 00:00:00
Debian Security Advisory DSA 2989-1 (apache2 - security update)
2014-07-24 00:00:00
amazon
amazon
Important: httpd
2014-07-31 13:54:00
Important: httpd24
2014-07-31 13:56:00
oraclelinux
oraclelinux
httpd security update
2014-07-23 00:00:00
httpd security update
2014-07-23 00:00:00
httpd24-httpd security and bug fix update
2016-02-04 00:00:00
osv
osv
apache2 - security update
2014-07-24 00:00:00
apache2 - security update
2014-09-29 00:00:00
redhat
redhat
(RHSA-2014:0920) Important: httpd security update
2014-07-23 00:00:00
(RHSA-2014:1088) Important: Red Hat JBoss Web Server 2.1.0 update
2014-08-21 00:00:00
centos
centos
httpd, mod_ssl security update
2014-07-23 15:12:33
httpd, mod_ldap, mod_proxy_html, mod_session, mod_ssl security update
2014-07-23 15:36:55
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:03:41
Denial Of Service (DoS)
2019-05-02 05:03:42
Denial Of Service (DoS)
2019-05-02 05:03:43
mageia
mageia
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
Updated apache package fixes security vulnerabilities
2014-07-30 01:30:55
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2014-08-29 00:00:00
Apache: Multiple vulnerabilities
2015-04-11 00:00:00
suse
suse
Security update for the Apache Web Server (important)
2014-08-07 01:04:17
Security update for apache2 (important)
2014-09-02 19:04:20
Security update for apache2 (important)
2014-09-02 20:04:23
slackware
slackware
[slackware-security] httpd
2014-07-24 01:35:41
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2014-07-23 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: httpd-2.4.10-1.fc19
2014-08-15 02:47:11
[SECURITY] Fedora 20 Update: httpd-2.4.10-1.fc20
2014-07-25 10:03:52
freebsd
freebsd
apache22 -- several vulnerabilities
2014-07-19 00:00:00
apache24 -- several vulnerabilities
2014-07-15 00:00:00
securityvulns
securityvulns
Apache multiple security vulnerabilities
2014-07-28 00:00:00
[USN-2299-1] Apache HTTP Server vulnerabilities
2014-07-28 00:00:00
f5
f5
oracle
oracle
Oracle Critical Patch Update Advisory - January 2015
2015-03-10 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.956 High
EPSS
Percentile
99.4%
Related for UB:CVE-2014-0226