CVE-2014-0226 in Apple MacOS X

摘要 (英语)

Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.

预定

2013-12-02

披露

2014-07-20

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
74706	Apple MacOS X Apache 竞争条件	362	概念验证	官方修复	CVE-2014-0226
68792	Oracle Secure Global Desktop mod_status mod_status.c lua_ap_scoreboard_worker 竞争条件	362	概念验证	官方修复	CVE-2014-0226
68687	Oracle Enterprise Manager Ops Center Update Provisioning 竞争条件	362	概念验证	官方修复	CVE-2014-0226
68658	Oracle HTTP Server Web Listener mod_status.c lua_ap_scoreboard_worker 竞争条件	362	概念验证	官方修复	CVE-2014-0226
67185	Apache HTTP Server mod_status 竞争条件	362	概念验证	官方修复	CVE-2014-0226