Description
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2012-1531 Vulnerability (CVE-2012-1531)
WordPress 3.0.4 Multiple Vulnerabilities (0.6.2 - 3.0.4)
SharePoint CVE-2024-38228 Vulnerability (CVE-2024-38228)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.9.2)
WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4)