BSA-2018-552
21637
20 September 2018
30 March 2018
Closed
Medium
7.5
N/A
CVE-2018-1303
Summary
Security Advisory ID : BSA-2018-552
Component : Apache HTTPD
Revision : 2.0: Final
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.33 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache.
A remote attacker could exploit this to cause a denial of service.
Affected Products
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Revision History
| Version | Change | Date |
|---|---|---|
| 1.0 | Initial Publication | Mar 30, 2018 |
| 2.0 | Update FOS | Sep 20, 2018 |