{"action":"Upgrade libapache2-mod-rpaf to 0.6-1 or later.","affected":[{"fixed":"0.6-1","introduced":"0"}],"component":"libapache2-mod-rpaf","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.6-1"],"id":"tcs_01M5NA3HHG48705T86E2NJPMHV","modified_at":"2026-10-23T17:47:36.011688545Z","published_at":"2012-09-05T23:55:01.803Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-3526","https://security-tracker.debian.org/tracker/CVE-2012-3526"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-3526#Debian:14/libapache2-mod-rpaf","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-3526"}],"summary":"The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multiple X-Forwarded-For h"}