Description

The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.

Remediation

References

CVE-2012-4557

Related Vulnerabilities

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12814)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1318)

WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (5.7)

PHP Other Vulnerability (CVE-2004-0595)

WordPress Plugin WP Sitemap Page Cross-Site Scripting (1.6.4)

Severity

Medium

Classification

CVE-2012-4557

Tags

Missing Update Known Vulnerabilities