Wind River Support Network

HomeDefectsLIN1021-479
Fixed

LIN1021-479 : Security Advisory - apache2 - CVE-2020-13950

Created: Jun 3, 2021    Updated: Jul 14, 2021
Resolved Date: Jul 14, 2021
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

https://nvd.nist.gov/vuln/detail/CVE-2020-13950

CVEs


Live chat
Online