CVE-2020-13950

Publication date

2021-06-10 07:10:21

Family

apache

State

PUBLISHED

Description

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service