CVE-2020-13950

mod_proxy_http NULL pointer dereference

published June 10, 2021

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49370 · 98.9th percentile
Published
2021-06-10T07:10Z
EPSS history
Timeline
  • 10 JUN 07:10Z
    mod_proxy_http NULL pointer dereference
    cvelistv5