| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.4.1= 2.4.10= 2.4.2= 2.4.3= 2.4.4= 2.4.6= 2.4.7= 2.4.9 | |
| enterprise manager ops center | = 12.2.0= 12.2.1= 12.3.0< 12.1.4 | 12.1.4 |
The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free