PT-2026-68186 · Apache · Apache Answer
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Apache Answer versions prior to 2.0.2
Description
Improper Handling of Length Parameter Inconsistency allows unauthenticated attackers to cause a denial of service. This is achieved by sending a specially crafted
Accept-Language header that triggers excessive CPU consumption during the parsing process.Recommendations
Upgrade to version 2.0.2.
Exploit
Fix
DoS
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Answer