Description

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Remediation

References

CVE-2014-3581

Related Vulnerabilities

WordPress Plugin AccessPress Social Counter includes Backdoor [Only if downloaded via the vendor website] (1.9.1)

Drupal Core 7.x Remote Code Execution (7.0 - 7.57)

Ruby Other Vulnerability (CVE-2014-8090)

Ruby Resource Management Errors Vulnerability (CVE-2014-2734)

PrestaShop CVE-2018-13784 Vulnerability (CVE-2018-13784)

Severity

Medium

Classification

CVE-2014-3581 CWE-476

Tags

Missing Update Known Vulnerabilities