CVE-2014-0118
Published: 20 July 2014
The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
apache2 Launchpad, Ubuntu, Debian |
lucid |
Released
(2.2.14-5ubuntu8.14)
|
| precise |
Released
(2.2.22-1ubuntu1.7)
|
|
| trusty |
Released
(2.4.7-1ubuntu4.1)
|
|
| upstream |
Released
(2.4.10)
|
|
|
Patches: upstream: http://svn.apache.org/viewvc?view=revision&revision=1610503 upstream: http://svn.apache.org/viewvc?view=revision&revision=1610522 upstream: http://svn.apache.org/viewvc?view=revision&revision=1611426 |
||