VULNERABILITY INTELLIGENCE
CVE-2007-1863
CVSS score5 MEDIUM
EPSS probability11.79%
CISA KEVNot currently listed
Published2007-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.
Primary references
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Issue Tracking
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com — Vendor Advisory
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Third Party Advisory, VDB Entry
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Third Party Advisory, VDB Entry
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Broken Link