VULNERABILITY INTELLIGENCE
CVE-2018-1303
CVSS score7.5 HIGH
EPSS probability69.80%
CISA KEVNot currently listed
Published2018-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared memory. It could be used as a Denial of Service attack against users of mod_cache_socache. The vulnerability is considered as low risk since mod_cache_socache is not widely used, mod_cache_disk is not concerned by this vulnerability.
Weakness classification
- CWE-125: Out-of-bounds Read
Primary references
- security@apache.org — Mailing List, Third Party Advisory
- security@apache.org — Third Party Advisory, VDB Entry
- security@apache.org — Third Party Advisory, VDB Entry
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Third Party Advisory
- security@apache.org — Vendor Advisory
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org