SB2014072006 - Resource management error in Apache HTTP Server 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2014072006

SB2014072006 - Resource management error in Apache HTTP Server

Published: July 20, 2014 Updated: July 28, 2020

Security Bulletin ID SB2014072006
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Resource management error (CVE-ID: CVE-2014-0118)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.


Remediation

Install update from vendor's website.

References