DoS vulnerabilities in Apache httpd

Description

Multiple serious vulnerabilities have been found in Apache httpd. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities

1. Vectors related to mod_log_config can be exploited remotely via a specially designed cookie;
2. An improper string work vulnerability can be exploited remotely via a specially designed DAV WRITE request.

Original advisories

• Apache changelog

Related products

• Apache-HTTP-Server

CVE list

• CVE-2013-6438
  critical
• CVE-2014-0098
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com