CVE-2006-20001 — Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

Affected: Apache Software Foundation Apache HTTP Server

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.

This issue affects Apache HTTP Server 2.4.54 and earlier.

USN-5834-1 — apache2 vulnerabilities

Affected: Ubuntu:Pro:16.04:LTS: apache2

It was discovered that the Apache HTTP Server mod_dav module did not properly handle specially crafted request headers. A remote attacker could possibly use this issue to cause the process to crash, leading to a denial of service. (CVE-2006-20001)

It was discovered that the Apache HTTP Server mod_proxy_ajp module did not properly handle certain invalid Transfer-Encoding headers. A remote attacker could possibly use this issue to perform an HTTP Request Smuggling attack. (CVE-2022-36760)

Most recent entries from all

CVE-2006-20001 — Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

USN-5834-1 — apache2 vulnerabilities