Description

Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.

Remediation

References

CVE-2004-0113

Related Vulnerabilities

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5877)

WordPress Plugin WP SVG images Cross-Site Scripting (3.3)

PHP Numeric Errors Vulnerability (CVE-2016-4346)

WordPress Plugin Swiss Toolkit For WP Security Bypass (1.0.8)

WordPress Plugin W3 Total Cache PHP Code Injection (0.9.2.8)

Severity

Medium

Classification

CVE-2004-0113

Tags

Missing Update Known Vulnerabilities