suse · CVE-2005-3357

Quick triage

Priority: medium Published: 2021-05-30 12:33:58 UTC Updated: 2026-04-18 20:42:52 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2005-3357 severity moderate: SUSE including 8 source package names (apache2-2.4.49-1.1, apache2-2.4.63-160000.2.2, …), 8 product×package rows across 2 product lines (SUSE Linux Enterprise Server 16.0, openSUSE Tumbleweed): Fixed 8.

Description:

mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error page, allows remote attackers to cause a denial of service (application crash) via a non-SSL request to an SSL port, which triggers a NULL pointer dereference.

cvelogic Threat Intelligence