CVE-2014-3583 in Oracle Enterprise Manager

Summary

The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service (buffer over-read and daemon crash) via long response headers.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

05/14/2014

Disclosure

12/15/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
80409	Oracle Enterprise Manager Ops Center memory corruption	119	Not defined	Official fix	CVE-2014-3583
68435	Apache HTTP Server mod_proxy_fcgi.c handle_headers memory corruption	119	Not defined	Official fix	CVE-2014-3583

Sources

• MITRE
• NVD
• CVE Details