apache

Page content
  • Author: Miklos Vajna
  • Vulnerable: 2.2.19-2mores1
  • Unaffected: 2.2.20-1mores1

Kingcope has discovered a vulnerability in Apache HTTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error within the ByteRange filter when processing requests containing a large amount of ranges, which can be exploited to exhaust memory via specially crafted HTTP requests sent to the server.

CVEs: