CVE-2014-0117

概要

参考情報

• advisories.mageia.org/MGASA-2014-0305.html
• httpd.apache.org/security/vulnerabilities_24.html · Patch
• lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
• seclists.org/fulldisclosure/2014/Jul/117
• svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c
• svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c
• svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c
• svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/proxy_util.c
• oracle.com/technetwork/topics/security/cpujan2015-1972971.html
• zerodayinitiative.com/advisories/ZDI-14-239
• bugzilla.redhat.com/show_bug.cgi

http server のその他の脆弱性

• CVE-2026-93546高 8.8Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker …
• CVE-2026-79768中 5.3Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wi…
• CVE-2026-73637高 7.3Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated …
• CVE-2026-73636高 8.1Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a …
• CVE-2026-63718高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via …