| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.0.40= 2.0.41= 2.0.42= 2.0.43= 2.0.44= 2.0.45 |
The authentication module for Apache 2.0.40 through 2.0.45 on Unix does not properly handle threads safely when using the crypt_r or crypt functions, which allows remote attackers to cause a denial of service (failed Basic authentication with valid usernames and passwords) when a threaded MPM is used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free