Tracker / CVE-2008-2364
CVE-2008-2364
Medium 5.0
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
Affected products and versions
| apache | http_server · 2.0.35 → 2.0.64 |
|---|---|
| apache | http_server · 2.2.0 → 2.2.9 |
| canonical | ubuntu_linux |
| fedoraproject | fedora |
| redhat | enterprise_linux_desktop |
| redhat | enterprise_linux_eus |
| redhat | enterprise_linux_server |
| redhat | enterprise_linux_workstation |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.