Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:11124
HistoryJan 15, 2019 - 8:57 a.m.

Denial Of Service

2019-01-1508:57:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

The httpd packages is susceptible to a denial of service. The vulnerability is possible due to a NULL pointer dereference flaw in the mod_cache httpd module. A malicious HTTP server causes the httpd child process to crash when the Apache HTTP Server was used as a forward proxy with caching.

CPENameOperatorVersion
httpd24-httpdeq2.4.6__16.el6

References

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P