CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.6. It affects Apache. Its EPSS score suggests a 30.8% probability of exploitation in the next 30 days. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2012-0021
Severity
LOW
CVSS
2.6
EPSS
30.81%
Apache
Original NVD Description
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, which allows remote attackers to cause a denial of service (daemon crash) via a cookie that lacks both a name and a value.