Zecrazytux

**Name of the Vulnerable Software and Affected Versions** Apache HTTP Server mod rpaf versions 0.5 through 0.6 **Description** The issue allows remote attackers to cause a denial of service, resulting in a server or application crash, by sending multiple X-Forwarded-For headers in a request. **Recommendations** For mod rpaf version 0.5, update to a version that fixes this issue. For mod rpaf version 0.6, update to a version that fixes this issue. As a temporary workaround, consider restricting or disabling the use of the X-Forwarded-For header in requests to minimize the risk of exploitation.