Lucene search

K
cvelistApacheCVELIST:CVE-2018-8011
HistoryJul 17, 2018 - 12:00 a.m.

CVE-2018-8011 mod_md, DoS via Coredumps on specially crafted requests

2018-07-1700:00:00
apache
www.cve.org
2

7.2 High

AI Score

Confidence

High

0.949 High

EPSS

Percentile

99.3%

By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).

CNA Affected

[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33)"
      }
    ]
  }
]

References