Description

Memory leak in the winnt_accept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted requests.

Remediation

References

CVE-2014-3523

Related Vulnerabilities

Coppermine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2476)

MediaWiki CVE-2023-37305 Vulnerability (CVE-2023-37305)

WordPress Plugin GD bbPress Attachments Multiple Vulnerabilities (2.2)

WordPress Plugin Search & Replace PHP Object Injection (3.2.2)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder PHP Object Injection (4.02)

Severity

Medium

Classification

CVE-2014-3523

Tags

Missing Update Known Vulnerabilities