AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-1301

MEDIUM · CVSS 5.9 EPSS 15.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-26 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2018-1301
Severity
MEDIUM
CVSS
5.9
EPSS
15.26%
Apache

Original Filing — NVD Description

A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound access after a size limit is reached by reading the HTTP header. This vulnerability is considered very hard if not impossible to trigger in non-debug mode (both log and build level), so it is classified as low risk for common server usage.