NetSight
IP …
high7.1

CVE-2009-1891

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which…

Impact

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.35 before 2.0.64
from 2.2.0 before 2.2.12
DebianDebian Linux
Versions 4.0, 5.0, 6.0
FedoraprojectFedora
Version 11
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Eus
Version 5.3
RedhatEnterprise Linux Server
Version 5.0
RedhatEnterprise Linux Server Aus
Version 5.3
RedhatEnterprise Linux Workstation
Version 5.0

Weakness classification

CWE-400

References