CVE-2018-1301

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by…

published March 26, 2018

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14991 · 96.7th percentile
Published
2018-03-26T15:00Z
EPSS history
Timeline
  • 26 MAR 15:00Z
    A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by…
    cvelistv5