Description
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2010-0911 Vulnerability (CVE-2010-0911)
SharePoint CVE-2022-24472 Vulnerability (CVE-2022-24472)
TYPO3 Improper Input Validation Vulnerability (CVE-2011-4902)
Oracle Database Server CVE-2013-1554 Vulnerability (CVE-2013-1554)
WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)