Debian/apache2: high 7.5
In Apache HTTP Server 2.4.53 and earlier, a malicious request to a lua script that calls r:parsebody(0) may cause a denial of service due to no default limit on possible input size.
Action: Upgrade apache2 to 2.4.54-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.54-1 | - |
Fixed versions
| 2.4.54-1 |
Sources
published · modified · JSON