CVE-2014-0117 in Apple MacOS X

Summary

The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Connection header.

Reservation

12/03/2013

Disclosure

07/20/2014

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
74704	Apple MacOS X Apache input validation	20	Proof-of-Concept	Official fix	CVE-2014-0117
67183	Apache HTTP Server mod_proxy input validation	20	Proof-of-Concept	Official fix	CVE-2014-0117