| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.0.35, ≤ 2.0.54 |
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free