Wind River Support Network

HomeDefectsLIN5-19165
Fixed

LIN5-19165 : Security Advisory - apache - CVE-2014-0231

Created: Aug 3, 2014    Updated: Dec 19, 2017
Resolved Date: Sep 29, 2014
Found In Version: 5.0
Fix Version: 5.0.1.20
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0231

Other Downloads


Live chat
Online