description: In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
problem types: Use of Out-of-range Pointer Offset (CWE-823)
affected:
{
product: Apache HTTP Server
vendor: Apache Software Foundation
versions:
status: affected, version: 2.4.0 to 2.4.23
}