CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3581

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.039

EPSS Ranking 87.6%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2014-3581

Apache » Http Server » Version: 2.4.1

cpe:2.3:a:apache:http_server:2.4.1
Apache » Http Server » Version: 2.4.10

cpe:2.3:a:apache:http_server:2.4.10
Apache » Http Server » Version: 2.4.2

cpe:2.3:a:apache:http_server:2.4.2
Apache » Http Server » Version: 2.4.3

cpe:2.3:a:apache:http_server:2.4.3
Apache » Http Server » Version: 2.4.4

cpe:2.3:a:apache:http_server:2.4.4
Apache » Http Server » Version: 2.4.6

cpe:2.3:a:apache:http_server:2.4.6
Apache » Http Server » Version: 2.4.7

cpe:2.3:a:apache:http_server:2.4.7
Apache » Http Server » Version: 2.4.9

cpe:2.3:a:apache:http_server:2.4.9
Oracle » Enterprise Manager Ops Center » Version: 11.1

cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1
Oracle » Enterprise Manager Ops Center » Version: 11.1.3

cpe:2.3:a:oracle:enterprise_manager_ops_center:11.1.3
Oracle » Enterprise Manager Ops Center » Version: 12.1

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1
Oracle » Enterprise Manager Ops Center » Version: 12.1.3

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.1.3
Oracle » Enterprise Manager Ops Center » Version: 12.2.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.0
Oracle » Enterprise Manager Ops Center » Version: 12.2.1

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.1
Oracle » Enterprise Manager Ops Center » Version: 12.3.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.0
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 14.10

cpe:2.3:o:canonical:ubuntu_linux:14.10
Oracle » Linux » Version: 6

cpe:2.3:o:oracle:linux:6
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_eus:7.3
Redhat » Enterprise Linux Eus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_eus:7.4
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3581

Products

Pricing

Contact Us