Description

The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.

Remediation

References

CVE-2014-0117

Related Vulnerabilities

Perl Out-of-bounds Read Vulnerability (CVE-2015-8608)

WordPress Plugin Real-Time Find and Replace Cross-Site Request Forgery (3.9)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9578)

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-31554)

WordPress Plugin Z-URL Preview Cross-Site Scripting (1.6.2)

Severity

Medium

Classification

CVE-2014-0117 CWE-20

Tags

Missing Update Known Vulnerabilities