Description

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Remediation

References

CVE-2014-3581

Related Vulnerabilities

WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.3.7)

WordPress Plugin Woocommerce Products Price Bulk Edit Cross-Site Scripting (2.2.0)

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29207)

WordPress Plugin Yoast SEO Cross-Site Scripting (20.2)

Sqlite Out-of-bounds Read Vulnerability (CVE-2021-31239)

Severity

Medium

Classification

CVE-2014-3581 CWE-476

Tags

Missing Update Known Vulnerabilities