Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
CVE-2024-52558: Apache HTTP Server Crashes from Malformed HTTP Requests
CVE-2024-52558 · published 1 year ago
Summary
Apache HTTP Server may crash if it receives a specially crafted HTTP request. This could allow an attacker to disrupt service. Update the server to the latest version to fix this issue.
Original advisory text
The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.
The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-191Integer Underflow (Wrap or Wraparound)
Timeline
Published6 Dec 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-52558 · NVD
Track software like this
Free during beta