CVE:CVE-2014-0226
CNNVD:CNNVD-201407-493
Apache HTTP Server是美国阿帕奇（Apache）软件基金会的一款开源网页服务器。mod_status是其中的一个用于生成描述服务器状态的Web页面的模块。
Apache HTTP Server 2.4.1至2.4.9版本的mod_status模块的modules/generators/mod_status.c文件中的‘status_handler’函数和modules/lua/lua_request.c文件中的‘lua_ap_scoreboard_worker’函数存在竞争条件漏洞。远程攻击者可通过发送特制的请求利用该漏洞造成拒绝服务（基于堆的缓冲区溢出），或获取敏感信息，也可能执行任意代码。
solution:Upgrade apache http_server to a higher version than 2.2.29,2.4.10,and avoid the version [2.2.0,2.2.29),[2.4.1,2.4.10); Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than 6.0.0,6.4.0,and avoid the version 6.0.0,6.4.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 11.1.3,12.1.4,and avoid the version 11.1.3,12.1.4; Upgrade oracle http_server to a higher version than 10.1.3.5.0,11.1.1.7.0,12.1.2.0,12.1.3.0,and avoid the version 10.1.3.5.0,11.1.1.7.0,12.1.2.0,12.1.3.0; Upgrade oracle secure_global_desktop to a higher version than 4.63,4.71,5.0,5.1,and avoid the version 4.63,4.71,5.0,5.1