CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

Summary:

Reference Links(if available):

http://httpd.apache.org/security/vulnerabilities_24.html

https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E

https://lists.apache.org/thread.html/r7f2b70b621651548f4b6f027552f1dd91705d7111bb5d15cda0a68dd@%3Cdev.httpd.apache.org%3E

https://lists.apache.org/thread.html/rbe197409ae4a58b629fb792d1aed541ccbbf865121a80e1c5938d223@%3Cannounce.httpd.apache.org%3E

http://www.openwall.com/lists/oss-security/2021/06/10/4

CVSS Score (if available)

v2: / MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

v3: / HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2020-13950

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates

AI Threat Worsening in 2025: Insights from Google Cloud

Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS

Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims

Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Microsoft Addresses Four Critical Zero-Days in November Patch Tuesday Updates

AI Threat Worsening in 2025: Insights from Google Cloud

Lazarus Group’s Code Smuggling Technique Exploits Extended Attributes in macOS

Ethical Hacker or Not? Amazon MOVEit Leaker’s Controversial Claims

Hive0145 Targets Europe with Sophisticated Strela Stealer Campaigns