CVE-2007-1863

Description

cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is used, allows remote attackers to cause a denial of service (child processing handler crash) via a request with the (1) s-maxage, (2) max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without a value.

5.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 30.39% Top 5%

Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory ibm.com Vendor Advisory mandriva.com Vendor Advisory ibm.com Vendor Advisory redhat.com Vendor Advisory novell.com Vendor Advisory redhat.com Vendor Advisory trustix.org Vendor Advisory apple.com Vendor Advisory mandriva.com Vendor Advisory gentoo.org Vendor Advisory hp.com Vendor Advisory ubuntu.com Vendor Advisory redhat.com Vendor Advisory apache.org Vendor Advisory apache.org

Affected: n/a n/a

References

Link	Tags
http://secunia.com/advisories/28606	third party advisory broken link
https://rhn.redhat.com/errata/RHSA-2007-0533.html	third party advisory vendor advisory
http://secunia.com/advisories/26822	third party advisory broken link
http://www.redhat.com/support/errata/RHSA-2007-0557.html	vendor advisory broken link
http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702	third party advisory vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:140	third party advisory vendor advisory
http://secunia.com/advisories/25920	third party advisory broken link
http://secunia.com/advisories/26993	third party advisory broken link
http://secunia.com/advisories/27563	third party advisory broken link
http://secunia.com/advisories/27732	third party advisory broken link
http://www-1.ibm.com/support/docview.wss?uid=swg1PK49355	third party advisory vendor advisory
http://rhn.redhat.com/errata/RHSA-2007-0556.html	vdb entry third party advisory vendor advisory
http://httpd.apache.org/security/vulnerabilities_20.html	vendor advisory
http://www.us-cert.gov/cas/techalerts/TA08-150A.html	third party advisory broken link
http://www.novell.com/linux/security/advisories/2007_61_apache2.html	vendor advisory broken link
http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html	mailing list third party advisory vendor advisory
http://www.trustix.org/errata/2007/0026/	vendor advisory broken link
http://httpd.apache.org/security/vulnerabilities_22.html	vendor advisory
http://secunia.com/advisories/30430	third party advisory broken link
http://www.securityfocus.com/bid/24649	vdb entry third party advisory
http://lists.apple.com/archives/security-announce/2008//May/msg00001.html	third party advisory vendor advisory
http://www.vupen.com/english/advisories/2007/3386	permissions required vdb entry third party advisory
http://osvdb.org/37079	vdb entry broken link
http://www.securityfocus.com/archive/1/505990/100/0/threaded	mailing list vdb entry third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:141	third party advisory vendor advisory
http://www.vupen.com/english/advisories/2008/0233	permissions required vdb entry third party advisory
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html	third party advisory
http://www.securitytracker.com/id?1018303	vdb entry third party advisory
http://secunia.com/advisories/27037	third party advisory broken link
http://secunia.com/advisories/26443	third party advisory broken link
http://lists.vmware.com/pipermail/security-announce/2009/000062.html	mailing list vdb entry third party advisory
http://security.gentoo.org/glsa/glsa-200711-06.xml	third party advisory vendor advisory
https://issues.rpath.com/browse/RPL-1500	broken link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9824	vdb entry signature broken link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795	vendor advisory broken link
http://secunia.com/advisories/25830	third party advisory broken link
http://www.vupen.com/english/advisories/2008/1697	permissions required vdb entry third party advisory
http://www.ubuntu.com/usn/usn-499-1	vdb entry third party advisory vendor advisory
http://secunia.com/advisories/26508	third party advisory broken link
http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm	third party advisory
http://secunia.com/advisories/26842	third party advisory broken link
http://www.vupen.com/english/advisories/2007/3283	permissions required vdb entry third party advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=244658	issue tracking
http://www.vupen.com/english/advisories/2007/2727	permissions required vdb entry third party advisory
http://svn.apache.org/viewvc?view=rev&revision=535617	third party advisory
http://rhn.redhat.com/errata/RHSA-2007-0534.html	third party advisory vendor advisory
http://secunia.com/advisories/26273	third party advisory broken link
http://secunia.com/advisories/25873	third party advisory broken link
http://bugs.gentoo.org/show_bug.cgi?id=186219	third party advisory
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E	mailing list
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list
https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3E	third party advisory mailing list

Frequently Asked Questions

What is the severity of CVE-2007-1863?: CVE-2007-1863 has been scored as a medium severity vulnerability.
How to fix CVE-2007-1863?: To fix CVE-2007-1863, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-1863 being actively exploited in the wild?: It is possible that CVE-2007-1863 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~30% probability that this vulnerability will be exploited by malicious actors in the next 30 days.