CVE-2012-4557
apache2 - several
EPSS 26.0%
Description
The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows remote attackers to cause a denial of service (worker consumption) via an expensive request.
How to fix CVE-2012-4557
To remediate CVE-2012-4557, upgrade the affected package to a fixed version below.
- Debian/apache2—upgrade to 2.2.22-1 or later
- Debian/apache2—upgrade to 2.2.16-6+squeeze10 or later
Is CVE-2012-4557 being exploited?
Moderate — EPSS is 26.0%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (2)
- from 0, < 2.2.22-1
- from 0, < 2.2.16-6+squeeze10