CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

Score

CVSS 3.1 7.5 High

Status

Modified - security@apache.org

Published

2023-01-17

Last modified

2025-02-13

Weaknesses

CWE-787

Affected products

• Http Server (Apache)
• Apache Http Server (Apache Software Foundation)

References

• https://httpd.apache.org/security/vulnerabilities_24.html
• https://security.gentoo.org/glsa/202309-01
• https://security.netapp.com/advisory/ntap-20230316-0005/