Description
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
Remediation
References
Related Vulnerabilities
WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.18)
Drupal Core 8.5.x Cross-Site Scripting (8.5.0 - 8.5.1)
SharePoint CVE-2022-29108 Vulnerability (CVE-2022-29108)
MongoDb CVE-2024-6384 Vulnerability (CVE-2024-6384)
WordPress Plugin MAZ Loader-Preloader Builder for WordPress Cross-Site Request Forgery (1.4.0)