Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Http_server | Apache | 2.4.41 (including) | 2.4.46 (including) |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-apr-0:1.6.3-107.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-apr-util-0:1.6.1-84.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-curl-0:7.78.0-2.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-httpd-0:2.4.37-78.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_cluster-native-0:1.3.16-9.Final_redhat_2.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_http2-0:1.15.7-21.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_jk-0:1.2.48-20.redhat_1.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_md-1:2.0.8-40.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-mod_security-0:2.9.2-67.GA.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-nghttp2-0:1.39.2-39.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-openssl-1:1.1.1g-8.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-openssl-chil-0:1.0.0-7.el8jbcs | * |
| JBoss Core Services for RHEL 8 | RedHat | jbcs-httpd24-openssl-pkcs11-0:0.4.10-22.el8jbcs | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-apr-0:1.6.3-107.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-apr-util-0:1.6.1-84.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-curl-0:7.78.0-2.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-httpd-0:2.4.37-78.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_cluster-native-0:1.3.16-9.Final_redhat_2.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_http2-0:1.15.7-21.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_jk-0:1.2.48-20.redhat_1.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_md-1:2.0.8-40.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-mod_security-0:2.9.2-67.GA.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-nghttp2-0:1.39.2-39.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-1:1.1.1g-8.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-chil-0:1.0.0-7.jbcs.el7 | * |
| JBoss Core Services on RHEL 7 | RedHat | jbcs-httpd24-openssl-pkcs11-0:0.4.10-22.jbcs.el7 | * |
| Red Hat Enterprise Linux 8 | RedHat | httpd:2.4-8060020220615120644.ad008a3a | * |
| Red Hat JBoss Core Services 1 | RedHat | httpd | * |
| Apache2 | Ubuntu | devel | * |
| Apache2 | Ubuntu | focal | * |
| Apache2 | Ubuntu | groovy | * |
| Apache2 | Ubuntu | hirsute | * |
| Apache2 | Ubuntu | impish | * |
| Apache2 | Ubuntu | jammy | * |
| Apache2 | Ubuntu | trusty | * |
| Apache2 | Ubuntu | upstream | * |
| Apache2 | Ubuntu | xenial | * |