Description
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-66-1 | apache2 security update |
Debian DSA |
DSA-2989-1 | apache2 security update |
Ubuntu USN |
USN-2299-1 | Apache HTTP Server vulnerabilities |
References
History
No history.
Subscriptions
Apache
Subscribe
Http Server
Subscribe
Debian
Subscribe
Debian Linux
Subscribe
Oracle
Subscribe
Enterprise Manager Ops Center
Subscribe
Http Server
Subscribe
Secure Global Desktop
Subscribe
Redhat
Subscribe
Enterprise Linux
Subscribe
Jboss Enterprise Application Platform
Subscribe
Jboss Enterprise Web Server
Subscribe
Rhel Software Collections
Subscribe
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T09:05:39.328Z
Reserved: 2013-12-03T00:00:00.000Z
Link: CVE-2014-0226
No data.
Status : Deferred
Published: 2014-07-20T11:12:48.933
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-0226
OpenCVE Enrichment
No data.
Debian DLA
Debian DSA
Ubuntu USN