CVE-2013-4352 REJECTED

The cache_invalidate function in modules/cache/cache_storage.c in the mod_cache module in the Apache HTTP Server 2.4.6, when a caching forward proxy is enabled, allows remote HTTP servers to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger a missing hostname value.

EPSS 24.35% · 96.0th percentile

Risk Scores

EPSS Score
24.35%
96.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSapache20, 2.4.6-2ubuntu2, 2.4.6-2ubuntu3

Timeline

References

Open in Interactive Console →