Re: [users@httpd] Buffer overrun in Apache 2.4.7-2.4.17

2015-12-15 Thread William A Rowe Jr
On Tue, Dec 15, 2015 at 2:34 PM, Mike Pastore wrote: > Hi folks, > > I believe I've found a buffer overrun affecting (at least) Apache 2.4.7 > and 2.4.17. I don't know enough about this sort of thing to determine how > serious it is and whether or not it is a potential security vulnerability. > I

[users@httpd] Buffer overrun in Apache 2.4.7-2.4.17

2015-12-15 Thread Mike Pastore
Hi folks, I believe I've found a buffer overrun affecting (at least) Apache 2.4.7 and 2.4.17. I don't know enough about this sort of thing to determine how serious it is and whether or not it is a potential security vulnerability. If someone would please work with me to validate my findings and he