CVE-2014-3581

medium Apache
CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Score
4.8%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
P
Published: October 10, 2014 (4235 days ago)
Last Modified: May 6, 2026
Vendor: Apache
Source: NVD

Description

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

CWE

CWE-476

Affected Products

apache http servercanonical ubuntu linuxredhat enterprise linux desktopredhat enterprise linux eusredhat enterprise linux serverredhat enterprise linux server ausredhat enterprise linux server tusoracle enterprise manager ops centeroracle linux

References

🔗 lists.apple.com 🔗 lists.apple.com 🔗 rhn.redhat.com 🔗 svn.apache.org 🔗 svn.apache.org