CVE-2020-35452
httpd: Single zero byte stack overflow in mod_auth_digest
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 4, 2021
Updated · September 21, 2026
Description
A flaw was found in Apache httpd. The mod_auth_digest has a single zero byte stack overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Statement
This is a one byte overflow and as per upstream it should be non-exploitable in most condtions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Only configurations which use mod_auth_digest are affected by this flaw. Also as per upstream this flaw is not exploitable in most conditions, so there should really be no impact of this flaw.
CVSS / CWE
CVSS 3.1 · 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer