Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mod_rpaf: denial of service

Package(s):

mod_rpaf

CVE #(s):

CVE-2012-3526

Created:

September 28, 2012

Updated:

October 3, 2012

Description:

From the Gentoo advisory:

An error has been found in the way mod_rpaf handles X-Forwarded-For headers. Please review the CVE identifier referenced below for details.

A remote attacker could send a specially crafted HTTP header, possibly resulting in a Denial of Service condition.

Alerts:

Gentoo

2012-09-27

(Log in to post comments)