UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1301

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.

Severity
Medium 5.9
Published
26 Mar 2018
Last changed
17 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache HTTP ServerServers and applications · cpe:a:apache:http_server
  • Every version up to 2.4.29

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1301
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1301