Jérôme Djouder

A permissions issue exists where an application may be able to modify protected parts of the file system.

Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling.

An improper null termination leads to an out-of-bounds read in the `mod proxy ajp` module. Specifically, the `ajp msg get string()` function fails to perform a null-termination check, which may allow a remote attacker to cause a denial of service.