CVE-2020-35452

mod_auth_digest possible stack overflow by one nul byte

published June 10, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
55%
Percentile
99.0
In the wild
Unconfirmed
What it is

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.54808 · 99.0th percentile
Published
2021-06-10T07:10Z
EPSS history
Timeline
  • 10 JUN 07:10Z
    mod_auth_digest possible stack overflow by one nul byte
    cvelistv5