https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:43:47 +0000 https://cve.radiocsirt.org/vuln/certa-2012-avi-358 certa-2012-avi-358 https://cve.radiocsirt.org/vuln/certa-2012-avi-358 https://cve.radiocsirt.org/vuln/euvd-2026-116838 EUVD-2026-116838 https://cve.radiocsirt.org/vuln/euvd-2026-116838 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4415 <p>The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the &#34;len +=&#34; statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.</p> <p>The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the &#34;len +=&#34; statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-4415 https://cve.radiocsirt.org/vuln/ghsa-43r8-mvrp-6q9c <p>The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the &#34;len +=&#34; statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.</p> <p>The ap_pregsub function in server/util.c in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x through 2.2.21, when the mod_setenvif module is enabled, does not restrict the size of values of environment variables, which allows local users to cause a denial of service (memory consumption or NULL pointer dereference) via a .htaccess file with a crafted SetEnvIf directive, in conjunction with a crafted HTTP request header, related to (1) the &#34;len +=&#34; statement and (2) the apr_pcalloc function call, a different vulnerability than CVE-2011-3607.</p> https://cve.radiocsirt.org/vuln/ghsa-43r8-mvrp-6q9c https://cve.radiocsirt.org/vuln/gsd-2011-4415 gsd-2011-4415 https://cve.radiocsirt.org/vuln/gsd-2011-4415