Apache HTTP Server mod_proxy_html Buffer Overflow Vulnerability

A buffer overflow vulnerability has been identified in the mod_proxy_html module of Apache HTTP Server. This issue affects versions 2.4.67 and earlier, allowing an untrusted backend to execute an attack. The vulnerability can be exploited by sending crafted responses that manipulate memory, potentially leading to arbitrary code execution or causing the server to crash.

Impact

Exploitation of this vulnerability causes a buffer overflow, which can lead to memory corruption. In many cases, such buffer overflows can be exploited to execute arbitrary code under the user account of the web server.

Remediation

Users are advised to upgrade to Apache HTTP Server version 2.4.68, which addresses this vulnerability.