CVE-2014-0117

CVE-2014-0117 describes a denial-of-service vulnerability in the mod_proxy module of Apache HTTP Server versions 2.4.x before 2.4.10, affecting Apache and Apple products. An unauthenticated remote attacker can crash a child process by sending a specially crafted HTTP Connection header when reverse proxying is enabled. While the CVSS score is moderate (4.3), indicating partial availability impact, its FAUCET Risk Score of 96/100 suggests a higher practical risk. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered some community discussion and media coverage.