title: mod_md, DoS via Coredumps on specially crafted requests
description: By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).
problem types: (undefined)
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33)
}
metrics:
other: [
content: {'lang': 'eng', 'url': 'https://httpd.apache.org/security/impact_levels.html#moderate', 'value': 'moderate'}
type: unknown
]