Description
Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
Remediation
References
Related Vulnerabilities
WordPress Plugin Dean's FCKEditor with pwwang's code Arbitrary File Upload (1.0.0)
WordPress Plugin Stripe Payments Cross-Site Scripting (2.0.39)
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)
WordPress Plugin Limit Login Attempts Reloaded Cross-Site Scripting (2.15.2)