title: mod_proxy_http NULL pointer dereference
description: Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service
problem types: mod_proxy_http NULL pointer dereference
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: 2.4.46
status: affected, version: 2.4.43
status: affected, version: 2.4.41
}
metrics:
other: [
content: {'other': 'low'}
type: unknown
]