Description
Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- apache / http_server2.4.17 – 2.4.68
- Apache Software Foundation / Apache HTTP Server2.4.17 – 2.4.67
- debian / debian_linux11.0 – 11.0
Updated 11m ago · 8 sources