CVE-2007-1862
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of...
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
Exploit likelihood
What each source reports
NVD Score used
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
- Record
CVE-2007-1862- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
- Record
CVE-2007-1862- Updated
- 2026-11-02
EUVDEUVD-2007-1856 No score
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
- Record
EUVD-2007-1856- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9crv-77hm-6xmm No score
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of...
The recall_headers function in mod_mem_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information.
- Record
GHSA-9crv-77hm-6xmm- Updated
- 2026-11-02
OSVBELL-CVE-2007-1862
CVE-2007-1862 does not affect BellSoft software
- Record
BELL-CVE-2007-1862- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2openSUSE:Tumbleweed From an advisory covering 27 CVEs |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1862 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published June 4, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.12%, the 93rd percentile. No source names a fixed version.
References
securityfocus.com/bid/24553
issues.apache.org/bugzilla/show_bug.cgi?id=41551
people.apache.org/~covener/2.2.x-mod_memcache-poolmgmt.diff
secunia.com/advisories/27563
osvdb.org/38641
redhat.com/archives/fedora-package-announce/2007-September/msg00320.html
Show 68 moreShow less
oracle.com/technetwork/topics/security/cpuapr2013-1899555.html
httpd.apache.org/security/vulnerabilities_22.html
security.gentoo.org/glsa/glsa-200711-06.xml
mandriva.com/security/advisories?name=MDKSA-2007:127
vupen.com/english/advisories/2007/2231
bugs.gentoo.org/show_bug.cgi?id=186219
lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2007-1862
github.com/advisories/GHSA-9crv-77hm-6xmm
docs.bell-sw.com/security/cves/CVE-2007-1862
suse.com/security/cve/CVE-2005-3352