Description

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.

Remediation

References

CVE-2014-3583

Related Vulnerabilities

WordPress Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Vulnerability (CVE-2016-10033)

Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1256)

Microsoft SQL Server Other Vulnerability (CVE-2000-1082)

Joomla Other Vulnerability (CVE-2006-7008)

MySQL CVE-2013-0385 Vulnerability (CVE-2013-0385)

Severity

Medium

Classification

CVE-2014-3583 CWE-119

Tags

Missing Update Known Vulnerabilities