Riskcovery

CVE-2020-35452

mod_auth_digest possible stack overflow by one nul byte

State
Published
Severity
Not scored
Published
Jun 10, 2021
Updated
Aug 4, 2024
Reserved
Dec 14, 2020

Read the record on cve.org

Description

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Apache HTTP ServerApache Software Foundation
  • 2.4.46Affected
  • 2.4.43Affected
  • 2.4.41Affected
  • 2.4.39Affected
  • 2.4.38Affected
  • 2.4.37Affected
  • 2.4.35Affected
  • 2.4.34Affected
  • 2.4.33Affected
  • 2.4.29Affected
  • 2.4.28Affected
  • 2.4.27Affected
  • 2.4.26Affected
  • 2.4.25Affected
  • 2.4.23Affected
  • 2.4.20Affected
  • 2.4.18Affected
  • 2.4.17Affected
  • 2.4.16Affected
  • 2.4.12Affected
  • 2.4.10Affected
  • 2.4.9Affected
  • 2.4.7Affected
  • 2.4.6Affected
  • 2.4.4Affected
  • and 4 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.