CVE-2014-0098

The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon crash) via a crafted cookie that is not properly handled during truncation.

Date published : 2014-03-17

http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html