Description
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | apache | 1.3.26-0woody5 | DSA-525 |
Advisories 1
- DSA-525 apache - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20040611 [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache) mailing-list
- FLSA:1737 vendor-advisory
- RHSA-2004:245 vendor-advisory
- SSRT090208 vendor-advisory
- http://www.guninski.com/modproxy1.html
- 57628 vendor-advisory
- 20040610 Buffer overflow in apache mod_proxy,yet still apache much better than windows mailing-list
- oval:org.mitre.oval:def:100112 vdb-entry signature
- MDKSA-2004:065 vendor-advisory
- oval:org.mitre.oval:def:4863 vdb-entry signature
- 101555 vendor-advisory
- DSA-525 vendor-advisory
- VU#541310 third-party-advisory
- 101841 vendor-advisory
- 11841 third-party-advisory
- apache-modproxy-contentlength-bo(16387) vdb-entry
- [httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073139 [3/13] - in /websites/staging/httpd/trunk/content: ./ security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.ht mailing-list
- [httpd-cvs] 20210330 svn commit: r1888194 [3/13] - /httpd/site/trunk/content/security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [4/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
- [httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/ mailing-list
- [httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabiliti mailing-list