CVE-2014-0117

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.6 through 2.4.9

Description The issue allows remote attackers to cause a denial of service, resulting in the child process crashing when a specially crafted HTTP Connection header is sent to a server configured as a reverse proxy. This could lead to a denial of service against a threaded MPM.

Recommendations For Apache HTTP Server versions 2.4.6 through 2.4.9, update to version 2.4.10 or later to resolve the issue. As a temporary workaround, consider restricting access to the mod proxy module until a patch is available.