| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.0, < 2.2.29≥ 2.4.0, < 2.4.10 | 2.2.292.4.10 |
The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free