Red Hat Security AdvisoryRHSA-2009:1148
httpd security update
Released 2009-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-22.el5_3.2, httpd-2.2.3-22.el5_3.2.i386, httpd-2.2.3-22.el5_3.2.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-22.el5_3.2, httpd-2.2.3-22.el5_3.2.i386, mod_ssl-1:2.2.3-22.el5_3.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-22.el5_3.2, httpd-devel-2.2.3-22.el5_3.2, httpd-devel-2.2.3-22.el5_3.2.i386 +2
Fixes 2 records
Priority MEDIUM 48
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU co…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.17111 · Published 2009-07-10 · Fixed CWE-400
Priority MEDIUM 48
The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.16159 · Published 2009-07-05 · Fixed CWE-400
