Description
The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
Remediation
References
Related Vulnerabilities
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-37914)
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-28336)
Apache Tomcat Improper Input Validation Vulnerability (CVE-2012-2733)
Joomla! Core 4.x.x Multiple Vulnerabilities (4.0.0 - 4.2.6)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2022-23302)