CVE-2014-0226

CVE-2014-0226 describes a race condition in the mod_status module of Apache HTTP Server versions prior to 2.4.10, also affecting products from Debian, Oracle, and Red Hat. This vulnerability allows remote attackers to cause a denial of service through a heap-based buffer overflow, and potentially obtain sensitive information or execute arbitrary code. The attack requires medium complexity (AC:M) and can be launched over the network (AV:N), with potential for partial confidentiality, integrity, and availability impact (C:P/I:P/A:P), resulting in a CVSS score of 6.8. While not listed in CISA's KEV catalog, an exploit (EDB-34133) is publicly available, and its EPSS score of 0.57641 indicates a higher than average probability of exploitation.