Back

MEDIUM

httpd: mod_status heap-based buffer overflow

Published Jul 20, 2014

Description

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (56)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 20, 2014
Updated Aug 6, 2024
Reserved Dec 3, 2013
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Important
Public date Jul 17, 2014