Security Advisory

CVE-2020-13950

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-06-10 07:10:21
Last updated 2024-08-04 12:32:14
Assigner apache
CVSS score not scored
State PUBLISHED

Description

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service