Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) by sending a request that lacks a method to an installation that enables the INCLUDES filter and has an ErrorDocument 400 directive specifying a local URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache HTTP Server 安全漏洞
Vulnerability Description
Apache HTTP Server是美国阿帕奇软件（Apache Software）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。 Apache HTTP Server 2.4.12版本的server/protocol.c文件中的‘read_request_line’函数存在安全漏洞，该漏洞源于程序没有初始化结构体成员。将ErrorDocument 400指向本地URL路径并开启INCLUDES过滤器时，没有正确处理Error。远程攻击者可通过发送缺少安装方法（启
CVSS Information
N/A
Vulnerability Type
N/A