Description

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.

Remediation

References

CVE-2014-0118

Related Vulnerabilities

Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-5482)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.28)

MySQL CVE-2022-21289 Vulnerability (CVE-2022-21289)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2006-0996)

WordPress Plugin Bulk Datetime Change Security Bypass (1.11)

Severity

Medium

Classification

CVE-2014-0118 CWE-400

Tags

Missing Update Known Vulnerabilities