CVE-2014-3583
Fixed in a distro release EPSS 11%
The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.
Products: apple mac_os_x, apple os_x_server, apache http_server, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.4.10-8 |
| Debian 13 | apache2 | 2.4.10-8 |
| Debian 14 | apache2 | 2.4.10-8 |
| Red Hat rhel common 6 | mod_proxy_fcgi | 0:2.4.10-5.20150415gitd45a11f.el6cp |
| Red Hat rhel common 6 | mod_proxy_fcgi-debuginfo | 0:2.4.10-5.20150415gitd45a11f.el6cp |
| Ubuntu 14.04 LTS | apache2 | 2.4.7-1ubuntu4.4 |
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 |