title: Apache HTTP Server mod_session response handling heap overflow
description: In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
problem types: CWE-122 Heap-based Buffer Overflow
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: 2.4.46
status: affected, version: 2.4.43
status: affected, version: 2.4.41
status: affected, version: 2.4.39
status: affected, version: 2.4.38
status: affected, version: 2.4.37
status: affected, version: 2.4.35
status: affected, version: 2.4.34
status: affected, version: 2.4.33
status: affected, version: 2.4.29
status: affected, version: 2.4.28
status: affected, version: 2.4.27
status: affected, version: 2.4.26
status: affected, version: 2.4.25
status: affected, version: 2.4.23
status: affected, version: 2.4.20
status: affected, version: 2.4.18
status: affected, version: 2.4.17
status: affected, version: 2.4.16
status: affected, version: 2.4.12
status: affected, version: 2.4.10
status: affected, version: 2.4.9
status: affected, version: 2.4.7
status: affected, version: 2.4.6
status: affected, version: 2.4.4
status: affected, version: 2.4.3
status: affected, version: 2.4.2
status: affected, version: 2.4.1
status: affected, version: 2.4.0
}
metrics:
other: [
content: {'other': 'low'}
type: unknown
]