Apache.httpd.mod_status.Heap.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Apache HTTP Server.
The vulnerability is due to race condition when vulnerable software handles crafted HTTP requests. A remote attacker may be able to exploit this to launch an arbitrary code execution or information disclosure attack against the affected system. Also, remote attacker may be able to exploit this to cause denial of service conditions on the affected machine.

Affected Products

Apache Software Foundation HTTP Server (httpd) 2.4.1-2.4.9

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the latest update from the vendor.
http://httpd.apache.org/security/vulnerabilities_24.html

References