Apache HTTP Server CVE-2014-3523 Remote Denial of Service Vulnerability

Bugtraq ID:	68747
Class:	Unknown
CVE:	CVE-2014-3523
Remote:	Yes
Local:	No
Published:	Jul 15 2014 12:00AM
Updated:	Nov 03 2015 06:45PM
Credit:	Jeff Trawick of the ASF
Vulnerable:	HP Virtual Connect Enterprise Manager 6.2 HP Virtual Connect Enterprise Manager 6.1 HP Virtual Connect Enterprise Manager 6.0 HP Version Control Agent 2.1.5 HP Systems Insight Manager 7.0 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 HP System Management Homepage 6.2.2 7 HP System Management Homepage 3.0.2 .77 HP System Management Homepage 3.0 .68 HP System Management Homepage 3.0 .64 HP System Management Homepage 2.2.9 .1 HP System Management Homepage 2.2.8 HP System Management Homepage 2.2.6 HP System Management Homepage 2.1.12 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 HP System Management Homepage 2.1.9 HP System Management Homepage 2.1.8 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0 HP System Management Homepage 7.0 HP System Management Homepage 6.3 HP System Management Homepage 6.2 HP System Management Homepage 6.0 HP Insight Orchestration 6.2 HP Insight Orchestration 6.1 HP Insight Orchestration 6.0 Apache Software Foundation Apache 2.4.2
Not Vulnerable:

Apache HTTP Server CVE-2014-3523 Remote Denial of Service Vulnerability

Apache HTTP Server is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to cause denial of service conditions.

Apache HTTP Server 2.4.9, 2.4.8, 2.4.7, 2.4.6, 2.4.4, 2.4.3, 2.4.2, and 2.4.1 are vulnerable.

Apache HTTP Server CVE-2014-3523 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache HTTP Server CVE-2014-3523 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache HTTP Server CVE-2014-3523 Remote Denial of Service Vulnerability

References:

• Apache Homepage (Apache Software Foundation)