Description

Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.

Remediation

References

CVE-2012-0256

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-32472)

PHP Other Vulnerability (CVE-1999-0068)

WordPress Plugin MP3-jPlayer Information Disclosure (2.3.2)

WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)

WordPress Plugin Catpro Gallery Arbitrary File Upload (3.8)

Severity

Medium

Classification

CVE-2012-0256 CWE-119

Tags

Missing Update Known Vulnerabilities