Description
By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).
Remediation
References
Related Vulnerabilities
OpenSSL Cryptographic Issues Vulnerability (CVE-2013-0169)
WordPress Plugin Google XML Sitemap for Videos Cross-Site Request Forgery (2.6.1)
Apache Tomcat Resource Management Errors Vulnerability (CVE-2012-4534)
WebLogic Improper Access Control Vulnerability (CVE-2026-60680)
WordPress Plugin WP CleanFix Cross-Site Request Forgery (2.4.4)