Description

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.

Remediation

References

CVE-2014-0118

Related Vulnerabilities

Jboss EAP Cryptographic Issues Vulnerability (CVE-2012-5575)

Python Incorrect Conversion between Numeric Types Vulnerability (CVE-2008-1721)

Jboss EAP Incorrect Authorization Vulnerability (CVE-2017-12196)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-10405)

WordPress Plugin Constant Contact Forms Cross-Site Scripting (1.8.7)

Severity

Medium

Classification

CVE-2014-0118 CWE-400

Tags

Missing Update Known Vulnerabilities