Description

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Remediation

References

CVE-2014-3581

Related Vulnerabilities

WordPress Plugin Keyword Meta Cross-Site Request Forgery (3.0)

WebLogic CVE-2020-14588 Vulnerability (CVE-2020-14588)

MySQL CVE-2024-21162 Vulnerability (CVE-2024-21162)

WordPress Plugin Slimstat Analytics SQL Injection (3.9.5)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-11628)

Severity

Medium

Classification

CVE-2014-3581 CWE-476

Tags

Missing Update Known Vulnerabilities