CVE-2020-13950 – Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made t

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13950

Reference (s):

• https://security.netapp.com/advisory/ntap-20210702-0001/
• URL: https://security.netapp.com/advisory/ntap-20210702-0001/
• FEDORA:FEDORA-2021-dce7e7738e
• URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/
• FEDORA:FEDORA-2021-e3f6dd670d