CVE:CVE-2014-3581
CNNVD:CNNVD-201410-219
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache HTTP Server 2.4.11之前版本的mod_cache模块中的modules/cache/cache_util.c文件的‘cache_merge_headers_out’函数中存在安全漏洞。远程攻击者可借助空的HTTP Content-Type头利用该漏洞造成拒绝服务（空指针逆向引用和应用程序崩溃）。
solution:Upgrade apache http_server to a higher version than 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10,and avoid the version 2.4.1,2.4.2,2.4.3,2.4.4,2.4.6,2.4.7,2.4.9,2.4.10; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.3,7.4,7.5,7.6,7.7,and avoid the version 7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.3,7.4,7.6,7.7,and avoid the version 7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.3,7.6,7.7,and avoid the version 7.3,7.6,7.7; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.1.4,12.2.0,12.2.1,12.3.0,and avoid the version (,12.1.4),12.2.0,12.2.1,12.3.0; Upgrade oracle linux to a higher version than 6,and avoid the version 6