NetSight
IP …
medium5.0

CVE-2014-3581

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to c…

Impact

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Affected products

VendorProductAffected versions
ApacheHttp Server
Versions 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.6, 2.4.7
CanonicalUbuntu Linux
Versions 10.04, 12.04, 14.04, 14.10
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.3, 7.6, 7.7
OracleEnterprise Manager Ops Center
before 12.1.4
Versions 12.2.0, 12.2.1, 12.3.0
OracleLinux
Version 6

Weakness classification

CWE-476

References