CVE-2014-0226

Apache HTTP Server 2.2.0-2.2.28 - Denial of Service via mod_status Scoreboard Handling

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2014-0226. PoCs published by Marek Kroemeke, shreesh1.

AI-analyzed exploit summary This is a detailed technical writeup explaining the race condition in Apache httpd's mod_status (CVE-2014-0226), leading to heap buffer overflows or information leaks. It describes the vulnerability in ap_escape_logitem and how multi-threading can exploit it.

Description

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

Exploits (2)

exploitdb WRITEUP

by Marek Kroemeke · textdoslinux

https://www.exploit-db.com/exploits/34133

View Code ZIP pw:eip

This is a detailed technical writeup explaining the race condition in Apache httpd's mod_status (CVE-2014-0226), leading to heap buffer overflows or information leaks. It describes the vulnerability in ap_escape_logitem and how multi-threading can exploit it.

Classification

Writeup 90%

Attack Type

Info Leak

Complexity

Complex

Reliability

Racy

Target: Apache httpd 2.4.7 (with MPM event or worker)

No auth needed

Prerequisites: Apache httpd compiled with MPM event or worker · mod_status enabled with ExtendedStatus On

MITRE ATT&CK

T1083 - File and Directory Discovery T1005 - Data from Local System

devstral-2 · analyzed Feb 16, 2026 Full analysis →

nomisec WORKING POC

by shreesh1 · poc

https://github.com/shreesh1/CVE-2014-0226-poc

View Code ZIP pw:eip

This PoC exploits CVE-2014-0226, a DoS vulnerability in Apache HTTP Server's mod_status module. It floods the server with random requests while continuously querying the server-status page, causing excessive memory consumption.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Apache HTTP Server (mod_status module)

No auth needed

Prerequisites: mod_status enabled on the target server · access to the server-status page

MITRE ATT&CK

T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (53)

Core 53

Core References

Third Party Advisory x_refsource_confirm

https://support.apple.com/HT204659

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201504-03

Third Party Advisory x_refsource_confirm

https://puppet.com/security/cve/cve-2014-0226

Broken Link x_refsource_misc

https://www.povonsec.com/apache-2-4-7-exploit/

Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=144493176821532&w=2

Third Party Advisory x_refsource_confirm

http://advisories.mageia.org/MGASA-2014-0305.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2014/dsa-2989

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/68678

Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=144050155601375&w=2

Patch, Vendor Advisory x_refsource_confirm

http://httpd.apache.org/security/vulnerabilities_24.html

Vendor Advisory x_refsource_confirm

http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/CHANGES

Vendor Advisory x_refsource_confirm

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c

Third Party Advisory vendor-advisory x_refsource_gentoo

http://security.gentoo.org/glsa/glsa-201408-12.xml

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2014-1020.html

Not Applicable third-party-advisory x_refsource_secunia

http://secunia.com/advisories/60536

Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2014/Jul/114

Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=143748090628601&w=2

Issue Tracking, Mailing List, Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=143403519711434&w=2

Third Party Advisory x_refsource_confirm

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Third Party Advisory, VDB Entry x_refsource_misc

http://zerodayinitiative.com/advisories/ZDI-14-236/

Patch, Vendor Advisory x_refsource_confirm

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/generators/mod_status.c?r1=1450998&r2=1610491&diff_format=h

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1120603

Third Party Advisory x_refsource_confirm

https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04832246

Broken Link vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2014-1021.html

Patch, Vendor Advisory x_refsource_confirm

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c?r1=1588989&r2=1610491&diff_format=h

Broken Link, Mailing List vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

Broken Link vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDVSA-2014:142

Third Party Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2014-1019.html

Third Party Advisory x_refsource_confirm

http://advisories.mageia.org/MGASA-2014-0304.html

Broken Link vdb-entry x_refsource_osvdb

http://www.osvdb.org/109216

Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/34133

Vendor Advisory x_refsource_confirm

http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/lua/lua_request.c