Description

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Remediation

References

CVE-2014-3581

Related Vulnerabilities

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-17223)

Internet Information Services Other Vulnerability (CVE-1999-1544)

Moodle Improper Input Validation Vulnerability (CVE-2011-4294)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-2059)

WordPress Plugin Royal Gallery 'upload.php' Arbitrary File Upload (2.1)

Severity

Medium

Classification

CVE-2014-3581 CWE-476

Tags

Missing Update Known Vulnerabilities