CVE-2014-3581

MEDIUM · 5.0 CVSS Gepubliceerd: 10-10-2014 CWE-476

Beschrijving

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Vendors

Apache Canonical Redhat Oracle

Affected products

Http Server Ubuntu Linux Enterprise Linux Desktop Enterprise Linux Eus Enterprise Linux Server Enterprise Linux Server Aus Enterprise Linux Server Tus Enterprise Manager Ops Center Linux

Beschrijving

Vendors

Affected products

References