Description

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Remediation

References

CVE-2013-4352

Related Vulnerabilities

Roundcube Files or Directories Accessible to External Parties Vulnerability (CVE-2017-16651)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.2)

ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-6643)

Joomla Other Vulnerability (CVE-2006-3481)

TYPO3 Improper Input Validation Vulnerability (CVE-2015-8760)

Severity

Medium

Classification

CVE-2013-4352

Tags

Missing Update Known Vulnerabilities