| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 2.0= 2.0.28= 2.0.32= 2.0.35= 2.0.36= 2.0.37= 2.0.38= 2.0.39= 2.0.40= 2.0.41= 2.0.42= 2.0.43= 2.0.44= 2.0.45= 2.0.46= 2.0.47= 2.0.48= 2.0.49= 2.0.50= 2.0.51= 2.0.52= 2.0.53= 2.0.54= 2.0.55= 2.0.9 |
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free