Threats tagged 'ghsa-jmv5-rcpx-7f7r'

A NULL pointer dereference vulnerability exists in the mod_dav_lock module of Apache HTTP Server versions 2.4.66 and earlier. This flaw may allow an attacker to crash the server by sending a malicious request. The module mod_dav_lock is not used internally by mod_dav or mod_dav_fs, and its primary known use was with mod_dav_svn from Apache Subversion versions earlier than 1.2.0. Users are advised to upgrade to Apache HTTP Server version 2.4.66 or later, which addresses this issue, or alternatively remove the mod_dav_lock module.