ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-1303

—
CVSS 3.0
7.5 high
EPSS
70%p99
Published
()
Modified
Description

A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.

Vendors
apachedebiancanonicalnetapp
Products
http server, debian linux, ubuntu linux, santricity cloud connector, storage automation store, storagegrid, clustered data ontap
Weakness
CWE-125
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (69.8%)

In the news

No ingested article mentions this CVE yet.