Description
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
Remediation
References
Related Vulnerabilities
ProjectSend Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-11378)
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2080)
Oracle Database Server CVE-2006-3699 Vulnerability (CVE-2006-3699)
Apache Tomcat Improper Encoding or Escaping of Output Vulnerability (CVE-2021-30640)