| cache_util.c in the mod_cache module in Apache HTTP Server (httpd),
when caching is enabled and a threaded Multi-Processing Module (MPM)
is used, allows remote attackers to cause a denial of service (child
processing handler crash) via a request with the (1) s-maxage, (2)
max-age, (3) min-fresh, or (4) max-stale Cache-Control headers without
a value.
|