title: ap_escape_quotes buffer overflow
description: ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
problem types: Buffer Overflow
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 2.4.48, status: affected, version: Apache HTTP Server 2.4, versionType: custom
}
metrics:
other: [
content: {'other': 'low'}
type: unknown
]