vulnerability
Apache HTTPD: mod_dav out of bounds read, or write of zero byte (CVE-2006-20001)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Jan 17, 2023 | Nov 29, 2023 | Feb 14, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 17, 2023
Added
Nov 29, 2023
Modified
Feb 14, 2025
Description
A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.
This issue affects Apache HTTP Server 2.4.54 and earlier.
This issue affects Apache HTTP Server 2.4.54 and earlier.
Solution
apache-httpd-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.