CVE-2014-0117 PUBLISHED

The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.

EPSS 57.00% · 98.1th percentile

Risk Scores

EPSS Score
57.00%
98.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSapache20, 2.4.6-2ubuntu2, 2.4.6-2ubuntu3

Timeline

References

Open in Interactive Console →