CVE-2014-0098

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

Published: Mar 18, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-0098
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
apache / http_server	2.2.0	2.2.27
apache / http_server	2.4.1	2.4.9
oracle / secure_global_desktop	4.71	4.71.x
oracle / http_server	12.1.3.0	12.1.3.0.x
oracle / secure_global_desktop	4.63	4.63.x
oracle / http_server	12.1.2.0	12.1.2.0.x
oracle / http_server	11.1.1.7.0	11.1.1.7.0.x
oracle / http_server	10.1.3.5.0	10.1.3.5.0.x
oracle / secure_global_desktop	5.0	5.0.x
oracle / secure_global_desktop	5.1	5.1.x
canonical / ubuntu_linux	13.10	13.10.x
canonical / ubuntu_linux	12.10	12.10.x
canonical / ubuntu_linux	10.04	10.04.x
canonical / ubuntu_linux	12.04	12.04.x

Vulnerability Database

CVE-2014-0098

Deep Security Visibility Without the Complexity