Threats tagged 'ghsa-2p7m-6jhq-26cm'

A heap-based buffer overflow vulnerability exists in Apache HTTP Server's mod_xml2enc module when processing untrusted content. This affects Apache HTTP Server versions from 2.4.0 through 2.4.67. The issue is resolved in version 2.4.68. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, and can cause denial of service due to application crashes. Red Hat has issued security advisories and patches for affected products including Red Hat Hardened Images and Red Hat Enterprise Linux 10.