Description
The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.
Remediation
References
Related Vulnerabilities
Joomla! Core Multiple Vulnerabilities (1.5.0 - 3.8.11)
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-62253)
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2022-24839)
WordPress Plugin Contact Form 7 Integrations Multiple Cross-Site Scripting Vulnerabilities (1.3.10)