Description

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

Remediation

References

CVE-2013-4352

Related Vulnerabilities

WordPress Plugin Zoho CRM Lead Magnet Cross-Site Scripting (1.6.9.1)

PHP Out-of-bounds Read Vulnerability (CVE-2016-5093)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-0457)

Internet Information Services Other Vulnerability (CVE-1999-0449)

WordPress Plugin Simple Ads Manager Local File Inclusion (2.10.0.130)

Severity

Medium

Classification

CVE-2013-4352

Tags

Missing Update Known Vulnerabilities