| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.0, < 2.2.27≥ 2.4.1, < 2.4.9 | 2.2.272.4.9 |
| http server | = 10.1.3.5.0= 11.1.1.7.0= 12.1.2.0= 12.1.3.0 | |
| secure global desktop | = 4.63= 4.71= 5.0= 5.1 |
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free