Description
Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected.
Remediation
References
Related Vulnerabilities
Joomla Inadequate Encryption Strength Vulnerability (CVE-2011-3629)
Apache HTTP Server CVE-2016-5387 Vulnerability (CVE-2016-5387)
WordPress Plugin LiveChat-WP live chat Cross-Site Scripting (3.7.3)
Drupal Other Vulnerability (CVE-2006-3570)
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2020-11067)