CVEvulnerability

CVE-2014-0117

4.3 MEDIUM Published 2014-07-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-07-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20

Description

The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.

Affected configurations

• apache http server 2.4.6 • apache http server 2.4.7 • apache http server 2.4.8 • apache http server 2.4.9 • apple mac os x (<= 10.10.2)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References