CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0098

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.483

EPSS Ranking 97.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2014-0098

Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.12

cpe:2.3:a:apache:http_server:2.2.12
Apache » Http Server » Version: 2.2.13

cpe:2.3:a:apache:http_server:2.2.13
Apache » Http Server » Version: 2.2.14

cpe:2.3:a:apache:http_server:2.2.14
Apache » Http Server » Version: 2.2.15

cpe:2.3:a:apache:http_server:2.2.15
Apache » Http Server » Version: 2.2.15-60

cpe:2.3:a:apache:http_server:2.2.15-60
Apache » Http Server » Version: 2.2.16

cpe:2.3:a:apache:http_server:2.2.16
Apache » Http Server » Version: 2.2.17

cpe:2.3:a:apache:http_server:2.2.17
Apache » Http Server » Version: 2.2.18

cpe:2.3:a:apache:http_server:2.2.18
Apache » Http Server » Version: 2.2.19

cpe:2.3:a:apache:http_server:2.2.19
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.20

cpe:2.3:a:apache:http_server:2.2.20
Apache » Http Server » Version: 2.2.21

cpe:2.3:a:apache:http_server:2.2.21
Apache » Http Server » Version: 2.2.22

cpe:2.3:a:apache:http_server:2.2.22
Apache » Http Server » Version: 2.2.23

cpe:2.3:a:apache:http_server:2.2.23
Apache » Http Server » Version: 2.2.24

cpe:2.3:a:apache:http_server:2.2.24
Apache » Http Server » Version: 2.2.25

cpe:2.3:a:apache:http_server:2.2.25
Apache » Http Server » Version: 2.2.26

cpe:2.3:a:apache:http_server:2.2.26
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.5

cpe:2.3:a:apache:http_server:2.2.5
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.7

cpe:2.3:a:apache:http_server:2.2.7
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9
Apache » Http Server » Version: 2.4.1

cpe:2.3:a:apache:http_server:2.4.1
Apache » Http Server » Version: 2.4.2

cpe:2.3:a:apache:http_server:2.4.2
Apache » Http Server » Version: 2.4.3

cpe:2.3:a:apache:http_server:2.4.3
Apache » Http Server » Version: 2.4.4

cpe:2.3:a:apache:http_server:2.4.4
Apache » Http Server » Version: 2.4.5

cpe:2.3:a:apache:http_server:2.4.5
Apache » Http Server » Version: 2.4.6

cpe:2.3:a:apache:http_server:2.4.6
Apache » Http Server » Version: 2.4.7

cpe:2.3:a:apache:http_server:2.4.7
Apache » Http Server » Version: 2.4.8

cpe:2.3:a:apache:http_server:2.4.8
Oracle » Http Server » Version: 10.1.3.5.0

cpe:2.3:a:oracle:http_server:10.1.3.5.0
Oracle » Http Server » Version: 11.1.1.7.0

cpe:2.3:a:oracle:http_server:11.1.1.7.0
Oracle » Http Server » Version: 12.1.2.0

cpe:2.3:a:oracle:http_server:12.1.2.0
Oracle » Http Server » Version: 12.1.3.0

cpe:2.3:a:oracle:http_server:12.1.3.0
Oracle » Secure Global Desktop » Version: 4.63

cpe:2.3:a:oracle:secure_global_desktop:4.63
Oracle » Secure Global Desktop » Version: 4.71

cpe:2.3:a:oracle:secure_global_desktop:4.71
Oracle » Secure Global Desktop » Version: 5.0

cpe:2.3:a:oracle:secure_global_desktop:5.0
Oracle » Secure Global Desktop » Version: 5.1

cpe:2.3:a:oracle:secure_global_desktop:5.1
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.10

cpe:2.3:o:canonical:ubuntu_linux:13.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0098

Products

Pricing

Contact Us