CVE-2014-0226
No CVSS score yet. EPSS 86% chance of exploitation in the next 30 days.
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules/generators/mod_status.c and the lua_ap_scoreboard_worker function in modules/lua/lua_request.c.
- EPSS
- 86% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
- debian:debian_linux
- oracle:enterprise_manager_ops_center
- oracle:http_server
- oracle:secure_global_desktop
- redhat:jboss_enterprise_application_platform