Description
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.
Remediation
References
Related Vulnerabilities
WordPress Plugin Bricks Remote Code Execution (1.9.6)
WordPress Plugin Featured Comments Cross-Site Request Forgery (1.2.4)
WordPress Plugin Category Grid View Gallery Cross-Site Scripting (2.3.3)
Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2966)
WordPress Plugin Ajax Gallery 'list.php' SQL Injection (3.0)