Description

By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).

Remediation

References

CVE-2018-8011

Related Vulnerabilities

MySQL CVE-2020-14873 Vulnerability (CVE-2020-14873)

Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-7857)

Atlassian Jira Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2928)

MyBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2022-24734)

WordPress Plugin WP-Live Chat by 3CX Remote Code Execution (7.0.01)

Severity

High

Classification

CVE-2018-8011 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities