Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1890

Опубликовано: 02 июл. 2009
Источник: redhat
CVSS2: 5
EPSS Средний

Описание

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

Дополнительная информация

Статус:

Important
Дефект:
CWE-835
https://bugzilla.redhat.com/show_bug.cgi?id=509375httpd: mod_proxy reverse proxy DoS (infinite loop)

EPSS

Процентиль: 95%
0.2152
Средний

5 Medium

CVSS2

Связанные уязвимости

ubuntu
почти 16 лет назад

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

nvd
почти 16 лет назад

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

msrc
около 3 лет назад

Описание отсутствует

debian
почти 16 лет назад

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy mo ...

github
около 3 лет назад

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

EPSS

Процентиль: 95%
0.2152
Средний

5 Medium

CVSS2