CVE-2002-0392

The record

Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.

Affected packages

Related vulnerabilities

• CVE-2025-49630 In certain proxy configurations, a denial of service attack against Apache HTTP Server… Also affects apache2
• CVE-2025-49812 In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP… Also affects apache2
• CVE-2025-53020 Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. Also affects apache2
• CVE-2024-43394 Server-Side Request Forgery (SSRF) in Apache HTTP Server on Windows allows to potentially… Also affects apache2
• CVE-2024-47252 Insufficient escaping of user-supplied data in mod_ssl in Apache HTTP Server 2.4.63 and… Also affects apache2
• CVE-2025-23048 In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access… Also affects apache2
• CVE-2024-42516 HTTP response splitting in the core of Apache HTTP Server allows an attacker who can… Also affects apache2
• CVE-2024-43204 SSRF in Apache HTTP Server with mod_proxy loaded allows an attacker to send outbound… Also affects apache2