CVE Database›Document archive›CVE-2020-35452

CVE-2020-35452

httpd: Single zero byte stack overflow in mod_auth_digest

Loading…

Severity

Low

Red Hat Product Security

7.3

CVSS 3.1

Review impact separately from score.

Published · June 4, 2021

Updated · September 21, 2026

Description

A flaw was found in Apache httpd. The mod_auth_digest has a single zero byte stack overflow. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Statement

This is a one byte overflow and as per upstream it should be non-exploitable in most condtions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Only configurations which use mod_auth_digest are affected by this flaw. Also as per upstream this flaw is not exploitable in most conditions, so there should really be no impact of this flaw.

CVSS / CWE

CVSS 3.1 · 7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer