Description
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
References (27)
... and 7 more
Scores
CVSS v3
7.5
EPSS
0.3319
EPSS Percentile
96.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
CWE-823
Status
published
Products (18)
apache/http_server
2.4.0
apache/http_server
2.4.1
apache/http_server
2.4.2
apache/http_server
2.4.3
apache/http_server
2.4.6
apache/http_server
2.4.7
apache/http_server
2.4.8
apache/http_server
2.4.9
apache/http_server
2.4.10
apache/http_server
2.4.12
... and 8 more
Published
Jul 27, 2017
Tracked Since
Feb 18, 2026