CVE-2014-0118 ( Apache vulnerability in mod_deflate module could allow denial of service attacks)
Posted September 9, 2014
Assessed Risk Level: Medium
The deflate_in_filter function in the mod_deflate module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
Upstream CVSS v2 Score: 5.0
Affected Software Versions (affects Puppet Enterprise on Debian-based platforms only):
- Puppet Enterprise 2.x and 3.x
- Puppet Enterprise 2.8.8, 3.3.2