CVE-2007-6422

Medium

Description

The balancer_handler function in mod_proxy_balancer in the Apache HTTP Server 2.2.0 through 2.2.6, when a threaded Multi-Processing Module is used, allows remote authenticated users to cause a denial of service (child process crash) via an invalid bb variable.

SeverityMedium
CVSS4.0
Exploit probability—
ProductApache Http Server
PublishedJan 8, 2008
First seenJan 8, 2008

How to fix

Affected products

ProductAffected versionsFixed in
apache http_serverNo range specified, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.6—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.