| { |
| "data_type": "CVE", |
| "data_format": "MITRE", |
| "data_version": "4.0", |
| "generator": { |
| "engine": "xmltojsonmjc 1.0" |
| }, |
| "references": {}, |
| "timeline": [ |
| { |
| "time": "2014-05-30", |
| "lang": "eng", |
| "value": "reported" |
| }, |
| { |
| "time": "2014-07-14", |
| "lang": "eng", |
| "value": "public" |
| }, |
| { |
| "time": "2014-07-15", |
| "lang": "eng", |
| "value": "2.4.10 released" |
| }, |
| { |
| "time": "2014-09-03", |
| "lang": "eng", |
| "value": "2.2.29 released" |
| } |
| ], |
| "CNA_private": { |
| "owner": "httpd" |
| }, |
| "CVE_data_meta": { |
| "ASSIGNER": "security@apache.org", |
| "AKA": "", |
| "STATE": "PUBLIC", |
| "DATE_PUBLIC": "2014-07-14", |
| "ID": "CVE-2014-0226", |
| "TITLE": "mod_status buffer overflow" |
| }, |
| "source": { |
| "defect": [], |
| "advisory": "", |
| "discovery": "UNKNOWN" |
| }, |
| "problemtype": { |
| "problemtype_data": [ |
| { |
| "description": [ |
| { |
| "lang": "eng", |
| "value": "mod_status buffer overflow" |
| } |
| ] |
| } |
| ] |
| }, |
| "credit": [ |
| { |
| "lang": "eng", |
| "value": "This issue was reported by Marek Kroemeke, AKAT-1 and 22733db72ab3ed94b5f8a1ffcde850251fe6f466 via HP ZDI" |
| } |
| ], |
| "description": { |
| "description_data": [ |
| { |
| "lang": "eng", |
| "value": "A race condition was found in mod_status. An attacker able to access a public server status page on a server using a threaded MPM could send a carefully crafted request which could lead to a heap buffer overflow. Note that it is not a default or recommended configuration to have a public accessible server status page." |
| } |
| ] |
| }, |
| "impact": [ |
| { |
| "other": "moderate" |
| } |
| ], |
| "affects": { |
| "vendor": { |
| "vendor_data": [ |
| { |
| "vendor_name": "Apache Software Foundation", |
| "product": { |
| "product_data": [ |
| { |
| "product_name": "Apache HTTP Server", |
| "version": { |
| "version_data": [ |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.9" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.7" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.6" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.4" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.3" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.2" |
| }, |
| { |
| "version_name": "2.4", |
| "version_affected": "=", |
| "version_value": "2.4.1" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.27" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.26" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.25" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.24" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.23" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.22" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.21" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.20" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.19" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.18" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.17" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.16" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.15" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.14" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.13" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.12" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.11" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.10" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.9" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.8" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.6" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.5" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.4" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.3" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.2" |
| }, |
| { |
| "version_name": "2.2", |
| "version_affected": "=", |
| "version_value": "2.2.0" |
| } |
| ] |
| } |
| } |
| ] |
| } |
| } |
| ] |
| } |
| } |
| } |
