Description

The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.

Remediation

References

CVE-2004-0786

Related Vulnerabilities

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8167)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.15)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2017-12149)

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2209)

WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-5610)

Severity

Medium

Classification

CVE-2004-0786

Tags

Missing Update Known Vulnerabilities