The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Off-by-one error in the mod_ssl Certificate Revocation List (CRL) verification callback in Apache, when configured to use a CRL, allows remote attackers to cause a denial of service (child process crash) via a CRL that causes a buffer overflow of one null byte.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Aug 5, 2005 |
| Debian | — | Upgrade apache2 | Jul 30, 2024 | Aug 5, 2005 |
| Freebsd | — | Upgrade apache | Dec 10, 2025 | Sep 17, 2005 |
| Hpux | — | Apply the remediation from HP for CVE-2005-1268Apply patch PHSS_34163 from HPApply patch PHSS_34123 from HP | Aug 11, 2017 | Aug 5, 2005 |
| Suse | — | Upgrade apache2-docUpgrade apache2-preforkUpgrade apache2-develUpgrade apache2-workerUpgrade libapr0Upgrade apache2-example-pagesUpgrade apache2 | Feb 17, 2015 | Aug 5, 2005 |
| Ubuntu | — | Upgrade apache2-mpm-workerUpgrade apache2-mpm-prefork | Nov 8, 2024 | Aug 5, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub