PT-2020-12029 · Apache · Apache Http Server

Lander Usategui · Published 2020-06-24 · Updated 2020-07-02 · CVE-2020-10280

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Apache HTTP Server (affected versions not specified)

Description The issue allows for a denial-of-service (DoS) attack by spamming incomplete HTTP headers to the Apache server on port 80, which hosts the web interface, effectively blocking access to the dashboard.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

CWE-239

Related Identifiers

CVE-2020-10280

Affected Products

Apache Http Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-10280 · Security Note
• https://osv.dev/vulnerability/CVE-2020-10280 · Vendor Advisory
• https://github.com/aliasrobotics/RVD/issues/2568 · Note
• https://t.me/cibsecurity/13020 · Telegram Post
• https://t.me/cvenotify/4620 · Telegram Post