null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
| Software | From | Fixed in |
|---|---|---|
| apache / http_server | 2.4.0 | 2.4.60 |
| netapp / clustered_data_ontap | 9.0 | 9.0.x |