CVE-2009-1891
CVE-2009-1891
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
EPSS 17.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2
- https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html
- http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142
- http://secunia.com/advisories/35781
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12361
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:149
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361
- http://marc.info/?l=bugtraq&m=130497311408250&w=2
- http://www.redhat.com/support/errata/RHSA-2009-1156.html
- http://secunia.com/advisories/35865
- http://www.vupen.com/english/advisories/2009/1841
- http://secunia.com/advisories/37152
- http://www.securitytracker.com/id?1022529
- http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2
- http://www.debian.org/security/2009/dsa-1834
- http://www.securityfocus.com/archive/1/507857/100/0/threaded
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8632
- http://marc.info/?l=bugtraq&m=129190899612998&w=2
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712
- http://security.gentoo.org/glsa/glsa-200907-04.xml
- http://wiki.rpath.com/Advisories:rPSA-2009-0142
- https://nvd.nist.gov/vuln/detail/CVE-2009-1891