Red Hat Security AdvisoryRHSA-2009:1205
httpd security and bug fix update
Released 2009-08-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 httpd-2.0.46-75.ent, httpd-2.0.46-75.ent.i386, httpd-devel-2.0.46-75.ent +3
- Red Hat Enterprise Linux AS version 3 httpd-2.0.46-75.ent, httpd-2.0.46-75.ent.i386, httpd-2.0.46-75.ent.ia64 +9
- Red Hat Enterprise Linux ES version 3 httpd-2.0.46-75.ent, httpd-2.0.46-75.ent.i386, httpd-2.0.46-75.ent.ia64 +6
- Red Hat Enterprise Linux WS version 3 httpd-2.0.46-75.ent, httpd-2.0.46-75.ent.i386, httpd-2.0.46-75.ent.ia64 +6
Fixes 2 records
Priority MEDIUM 58
Multiple integer overflows in the Apache Portable Runtime (APR) library and the Apache Portable Utility library (aka APR-util) 0.9.x and 1.3.x allow remote attackers to cause a denial of service (application crash) or po…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.13781 · Published 2009-08-06 · Fixed CWE-189
Priority MEDIUM 48
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU co…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.17111 · Published 2009-07-10 · Fixed CWE-400
