UpHeron
All vulnerabilities

Servers and applications

CVE-2014-0231

The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script that does not read from its stdin file descriptor.

Severity
Medium 5.0
Published
20 Jul 2014
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Fixed in
2.2.29, 2.4.10
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • From 2.2.0 before 2.2.29
  • From 2.4.0 before 2.4.10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-0231
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-0231