2009-07-05 18:30:00 2018-10-30 17:25:27

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE
Apache Software Foundation Apache HTTP Server 2.2.9 Apache Software Foundation Apache HTTP Server 2.2.10 Apache Software Foundation Apache HTTP Server 2.2.11 Apache Software Foundation Apache HTTP Server 2.2.8 Apache Http server 2.2.7 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.2.6 Apache Software Foundation Apache HTTP Server 2.2.4 Apache Http server 2.2.3 Windows (not an official CPE) Apache Software Foundation Apache HTTP Server 2.2.3 Apache Http server 2.2.2 Windows (not an official CPE) Apache Software Foundation Apache HTTP Server 2.2.2 Apache Software Foundation Apache HTTP Server 2.2.1 Apache Software Foundation Apache HTTP Server 2.2.0 Apache Software Foundation Apache HTTP Server 2.1.9 Apache Software Foundation Apache HTTP Server 2.2 Apache Software Foundation Apache HTTP Server 2.1.8 Apache Software Foundation Apache HTTP Server 2.1.7 Apache Software Foundation Apache HTTP Server 2.1.6 Apache Software Foundation Apache HTTP Server 2.1.5 Apache Software Foundation Apache HTTP Server 2.1.4 Apache Software Foundation Apache HTTP Server 2.1.3 Apache Software Foundation Apache HTTP Server 2.1.2 Apache Software Foundation Apache HTTP Server 2.1.1 Apache Software Foundation Apache HTTP Server 2.1 Apache Software Foundation HTTP Server 2.0.61 Apache Software Foundation Apache HTTP Server 2.0.60 dev Apache Software Foundation HTTP Server 2.0.59 Apache Http server 2.0.58 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.0.58 Apache Software Foundation Apache HTTP Server 2.0.57 Apache Software Foundation Apache HTTP Server 2.0.56 Apache Software Foundation Apache HTTP Server 2.0.55 Apache Software Foundation Apache HTTP Server 2.0.54 Apache Software Foundation Apache HTTP Server 2.0.53 Apache Software Foundation Apache HTTP Server 2.0.52 Apache Software Foundation Apache HTTP Server 2.0.50 Apache Software Foundation Apache HTTP Server 2.0.51 Apache Software Foundation Apache HTTP Server 2.0.49 Apache Software Foundation Apache HTTP Server 2.0.48 Apache Software Foundation Apache HTTP Server 2.0.47 Apache Http server 2.0.46 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.0.45 Apache Software Foundation Apache HTTP Server 2.0.46 Apache Software Foundation Apache HTTP Server 2.0.44 Apache Software Foundation Apache HTTP Server 2.0.43 Apache Software Foundation Apache HTTP Server 2.0.42 Apache Software Foundation Apache HTTP Server 2.0.41 Apache Software Foundation Apache HTTP Server 2.0.40 Apache Software Foundation Apache HTTP Server 2.0.39 Apache Software Foundation Apache HTTP Server 2.0.38 Apache Software Foundation Apache HTTP Server 2.0.37 Apache Software Foundation Apache HTTP Server 2.0.36 Apache Http server 2.0.34 Beta Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.0.35 Apache Software Foundation Apache HTTP Server 2.0.34 Beta Apache Http server 2.0.32 Beta Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.0.32 Beta Apache Software Foundation Apache HTTP Server 2.0.32 Apache Http server 2.0.28 Beta Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.0.28 Beta Apache Software Foundation Apache HTTP Server 2.0.28 Apache Software Foundation Apache HTTP Server 2.0.9a Apache Software Foundation Apache HTTP Server 2.0 Apache Software Foundation Apache HTTP Server 1.99 Apache Software Foundation Apache HTTP Server 1.4.0 Apache Software Foundation Apache HTTP Server 1.3.68 Apache Software Foundation Apache HTTP Server 1.3.65 Apache Software Foundation Apache HTTP Server 1.3.39 Apache Software Foundation Apache HTTP Server 1.3.38 Apache Software Foundation Apache HTTP Server 1.3.37 Apache Software Foundation Apache HTTP Server 1.3.36 Apache Software Foundation Apache HTTP Server 1.3.35 Apache Software Foundation Apache HTTP Server 1.3.34 Apache Software Foundation Apache HTTP Server 1.3.33 Apache Software Foundation Apache HTTP Server 1.3.32 Apache Software Foundation Apache HTTP Server 1.3.31 Apache Software Foundation Apache HTTP Server 1.3.30 Apache Software Foundation Apache HTTP Server 1.3.29 Apache Software Foundation Apache HTTP Server 1.3.28 Apache Software Foundation Apache HTTP Server 1.3.27 Apache Http server 1.3.26 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.26 Apache Http server 1.3.25 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.25 Apache Http server 1.3.24 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.24 Apache Http server 1.3.23 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.23 Apache Http server 1.3.22 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.22 Apache Http server 1.3.20 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.20 Apache Http server 1.3.19 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.19 Apache Http server 1.3.18 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.18 Apache Http server 1.3.17 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.17 Apache Http server 1.3.16 Win32 (not an official CPE) Apache Software Foundation Apache 1.3.16 Apache Http server 1.3.15 Win32 (not an official CPE) Apache Software Foundation Apache 1.3.15 Apache Http server 1.3.14 Win32 (not an official CPE) Apache Http server 1.3.14 Mac os (not an official CPE) Apache Software Foundation Apache 1.3.13 Apache Http server 1.3.13 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.14 Apache Http server 1.3.12 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.12 Apache Http server 1.3.11 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.11 Apache Software Foundation Apache 1.3.10 Apache Http server 1.3.9 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.9 Apache Software Foundation Apache HTTP Server 1.3.8 Apache Http server 1.3.7 Dev (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.7 Apache Http server 1.3.6 Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 1.3.6 Apache Software Foundation Apache HTTP Server 1.3.5 Apache Software Foundation Apache HTTP Server 1.3.4 Apache Software Foundation Apache HTTP Server 1.3.3 Apache Software Foundation Apache HTTP Server 1.3.2 Apache Software Foundation Apache HTTP Server 1.3.1.1 Apache Software Foundation Apache HTTP Server 1.3.1 Apache Software Foundation Apache HTTP Server 1.3.0 Apache Software Foundation Apache HTTP Server 1.3 Apache Software Foundation Apache 1.29 Apache Software Foundation Apache HTTP Server 1.2.6 Apache Software Foundation Apache HTTP Server 1.2.5 Apache Software Foundation Apache HTTP Server 1.2.4 Apache Software Foundation Apache 1.2 Apache Software Foundation Apache HTTP Server 1.1.1 Apache Software Foundation Apache HTTP Server 1.1 Apache Software Foundation Apache HTTP Server 1.0.5 Apache Software Foundation Apache HTTP Server 1.0.3 Apache Software Foundation Apache HTTP Server 1.0.2 Apache Software Foundation Apache HTTP Server 1.0 Apache Software Foundation Apache HTTP Server 0.8.14 Apache Software Foundation Apache HTTP Server 0.8.11 Apache Http server - (not an official CPE) Apache Http server Win32 (not an official CPE) Apache Software Foundation Apache HTTP Server 2.3.0 Apache Software Foundation Apache HTTP Server 2.3.1 Apache Software Foundation Apache HTTP Server 2.3.2