Lucene search

K
httpdApache Team FoundationHTTPD:3D474EEBC8F5BC66AE37F523DD259829
HistoryFeb 19, 2014 - 12:00 a.m.

Apache Httpd < 2.2.29 : mod_deflate denial of service

2014-02-1900:00:00
Apache Team Foundation
httpd.apache.org
16

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.459 Medium

EPSS

Percentile

97.4%

A resource consumption flaw was found in mod_deflate. If request body decompression was configured (using the “DEFLATE” input filter), a remote attacker could cause the server to consume significant memory and/or CPU resources. The use of request body decompression is not a common configuration.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.459 Medium

EPSS

Percentile

97.4%