| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.12, ≤ 2.2.20 | |
| jboss enterprise web server | = 1.0.0 |
The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free