| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.0.35, < 2.0.61≥ 2.2.0, < 2.2.6 | 2.0.612.2.6 |
The date handling code in modules/proxy/proxy_util.c (mod_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to cause a denial of service (caching forward proxy process crash) via crafted date headers that trigger a buffer over-read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free