Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http_server | Apache | * | 1.3.41 (including) |
| Http_server | Apache | 0.8.11 (including) | 0.8.11 (including) |
| Http_server | Apache | 0.8.14 (including) | 0.8.14 (including) |
| Http_server | Apache | 1.0 (including) | 1.0 (including) |
| Http_server | Apache | 1.0.3 (including) | 1.0.3 (including) |
| Http_server | Apache | 1.0.5 (including) | 1.0.5 (including) |
| Http_server | Apache | 1.1 (including) | 1.1 (including) |
| Http_server | Apache | 1.2 (including) | 1.2 (including) |
| Http_server | Apache | 1.2.4 (including) | 1.2.4 (including) |
| Http_server | Apache | 1.2.5 (including) | 1.2.5 (including) |
| Http_server | Apache | 1.2.6 (including) | 1.2.6 (including) |
| Http_server | Apache | 1.3 (including) | 1.3 (including) |
| Http_server | Apache | 1.3.0 (including) | 1.3.0 (including) |
| Http_server | Apache | 1.3.1 (including) | 1.3.1 (including) |
| Http_server | Apache | 1.3.2 (including) | 1.3.2 (including) |
| Http_server | Apache | 1.3.3 (including) | 1.3.3 (including) |
| Http_server | Apache | 1.3.4 (including) | 1.3.4 (including) |
| Http_server | Apache | 1.3.10 (including) | 1.3.10 (including) |
| Http_server | Apache | 1.3.11 (including) | 1.3.11 (including) |
| Http_server | Apache | 1.3.12 (including) | 1.3.12 (including) |
| Http_server | Apache | 1.3.13 (including) | 1.3.13 (including) |
| Http_server | Apache | 1.3.14 (including) | 1.3.14 (including) |
| Http_server | Apache | 1.3.15 (including) | 1.3.15 (including) |
| Http_server | Apache | 1.3.17 (including) | 1.3.17 (including) |
| Http_server | Apache | 1.3.18 (including) | 1.3.18 (including) |
| Http_server | Apache | 1.3.19 (including) | 1.3.19 (including) |
| Http_server | Apache | 1.3.20 (including) | 1.3.20 (including) |
| Http_server | Apache | 1.3.22 (including) | 1.3.22 (including) |
| Http_server | Apache | 1.3.23 (including) | 1.3.23 (including) |
| Http_server | Apache | 1.3.24 (including) | 1.3.24 (including) |
| Http_server | Apache | 1.3.25 (including) | 1.3.25 (including) |
| Http_server | Apache | 1.3.26 (including) | 1.3.26 (including) |
| Http_server | Apache | 1.3.27 (including) | 1.3.27 (including) |
| Http_server | Apache | 1.3.28 (including) | 1.3.28 (including) |
| Http_server | Apache | 1.3.29 (including) | 1.3.29 (including) |
| Http_server | Apache | 1.3.30 (including) | 1.3.30 (including) |
| Http_server | Apache | 1.3.31 (including) | 1.3.31 (including) |
| Http_server | Apache | 1.3.32 (including) | 1.3.32 (including) |
| Http_server | Apache | 1.3.33 (including) | 1.3.33 (including) |
| Http_server | Apache | 1.3.34 (including) | 1.3.34 (including) |
| Http_server | Apache | 1.3.35 (including) | 1.3.35 (including) |
| Http_server | Apache | 1.3.36 (including) | 1.3.36 (including) |
| Http_server | Apache | 1.3.37 (including) | 1.3.37 (including) |
| Http_server | Apache | 1.3.38 (including) | 1.3.38 (including) |
| Http_server | Apache | 1.3.39 (including) | 1.3.39 (including) |
| Http_server | Apache | 1.3.40 (including) | 1.3.40 (including) |