UpHeron
All vulnerabilities

Servers and applications

CVE-2006-20001

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier.

Severity
High 7.5
Published
17 Jan 2023
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
2.4.55
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Every version before 2.4.55

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2006-20001
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2006-20001