CVE-2014-0231

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.10

Description The issue is related to the mod cgid module, which lacks a timeout mechanism. This allows remote attackers to cause a denial of service (process hang) by sending a request to a CGI script that does not read from its stdin file descriptor. A flaw in mod cgid can cause child processes to hang indefinitely if a server hosts CGI scripts that do not consume standard input, leading to denial of service.

Recommendations For versions prior to 2.4.10, update to version 2.4.10 or later to resolve the issue. As a temporary workaround, consider restricting access to CGI scripts that do not consume standard input to minimize the risk of exploitation.