F5-K000140784: Null Pointer Dereference
null pointer dereference in modproxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 17.5.017.1.2.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.1.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.1.10.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.01.5.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.0 - Upgrade
Upgrade
Apache HTTP Serverto a version that resolves this vulnerability.Fixed in 2.4.60
Event History
Frequently Asked Questions
What is the severity of F5-K000140784?
The severity of F5-K000140784 is significant due to the potential for attackers to crash the server.
How do I fix F5-K000140784?
To fix F5-K000140784, users should upgrade to Apache HTTP Server version 2.4.60 or later.
Which software versions are affected by F5-K000140784?
F5-K000140784 affects F5 BIG-IP versions 17.1.0 to 17.1.1, 16.1.0 to 16.1.5, 15.1.0 to 15.1.10, and F5OS versions 1.5.1 to 1.8.0.
Can I exploit F5-K000140784 remotely?
Yes, F5-K000140784 can be exploited remotely via a malicious request to the affected server.
What is a null pointer dereference in the context of F5-K000140784?
A null pointer dereference in F5-K000140784 refers to an error in the mod_proxy module that can lead to server crashes when improperly handling requests.