CVE-2020-35452

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.46

Description The issue is caused by a stack overflow in the mod auth digest function of the Apache HTTP Server. This can be triggered by a specially crafted Digest nonce. Although there are no reports of this overflow being exploitable, certain compiler and/or compilation options might make it possible, with limited consequences due to the size and value of the overflow.

Recommendations For Apache HTTP Server versions 2.4.0 through 2.4.46, consider updating to a version where this issue is fixed, as the current version may be vulnerable to a stack overflow in the mod auth digest function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.