UpHeron
All vulnerabilities

Servers and applications

CVE-2014-3581

The cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the Apache HTTP Server before 2.4.11 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an empty HTTP Content-Type header.

Severity
Medium 5.0
Published
10 Oct 2014
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Version 2.4.10
  • Version 2.4.9
  • Version 2.4.7
  • Version 2.4.6
All 8 release lines
  • Version 2.4.1
  • Version 2.4.2
  • Version 2.4.3
  • Version 2.4.4
  • Version 2.4.6
  • Version 2.4.7
  • Version 2.4.9
  • Version 2.4.10

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-3581
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-3581