Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2364
HistoryJun 13, 2008 - 6:41 p.m.

CVE-2008-2364

2008-06-1318:41:00
CWE-770
[email protected]
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON

The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

Affected configurations

NVD
Node
apachehttp_serverRange2.0.35–2.0.64
OR
apachehttp_serverRange2.2.0–2.2.9
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch7.10
OR
canonicalubuntu_linuxMatch8.04-
Node
fedoraprojectfedoraMatch8
OR
fedoraprojectfedoraMatch9
Node
redhatenterprise_linux_desktopMatch3.0
OR
redhatenterprise_linux_desktopMatch4.0
OR
redhatenterprise_linux_desktopMatch5.0
OR
redhatenterprise_linux_eusMatch4.7
OR
redhatenterprise_linux_eusMatch5.2
OR
redhatenterprise_linux_serverMatch3.0
OR
redhatenterprise_linux_serverMatch4.0
OR
redhatenterprise_linux_serverMatch5.0
OR
redhatenterprise_linux_workstationMatch3.0
OR
redhatenterprise_linux_workstationMatch4.0
OR
redhatenterprise_linux_workstationMatch5.0

References

Related

openvas 45
nessus 17
debiancve 1
seebug 1
checkpoint_advisories 1
veracode 1
prion 1
cve 1
httpd 2
fedora 2
ubuntucve 1
cvelist 1
freebsd 1
redhat 2
altlinux 3
securityvulns 3
oraclelinux 1
centos 1
gentoo 1
ubuntu 1
kaspersky 1
oracle 1
openvas
openvas
SLES10: Security update for Apache 2
2009-10-13 00:00:00
IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
2008-09-25 00:00:00
IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability
2008-09-25 00:00:00
nessus
nessus
SuSE 10 Security Update : Apache 2 (ZYPP Patch Number 6035)
2009-09-24 00:00:00
openSUSE 10 Security Update : apache2 (apache2-6054)
2009-03-13 00:00:00
Fedora 8 : httpd-2.2.9-1.fc8 (2008-6314)
2008-08-08 00:00:00
debiancve
debiancve
CVE-2008-2364
2008-06-13 18:41:00
seebug
seebug
Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability
2010-05-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against Apache mod_proxy Interim Responses Denial of Service
2009-01-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:29:44
prion
prion
Design/Logic Flaw
2008-06-13 18:41:00
cve
cve
CVE-2008-2364
2008-06-13 18:41:00
httpd
httpd
Apache Httpd < 2.0.64 : mod_proxy_http DoS
2008-05-29 00:00:00
Apache Httpd < 2.2.9 : mod_proxy_http DoS
2008-05-29 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.9-1.fc8
2008-08-07 23:57:20
[SECURITY] Fedora 9 Update: httpd-2.2.9-1.fc9
2008-08-07 23:48:09
ubuntucve
ubuntucve
CVE-2008-2364
2008-06-13 00:00:00
cvelist
cvelist
CVE-2008-2364
2008-06-13 18:00:00
freebsd
freebsd
apache -- multiple vulnerabilities
2008-06-14 00:00:00
redhat
redhat
(RHSA-2008:0967) Moderate: httpd security and bug fix update
2008-11-11 00:00:00
(RHSA-2008:0966) Moderate: Red Hat Application Stack v2.2 security and enhancement update
2008-12-04 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.9-alt1
2008-07-08 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.9-alt1
2008-07-08 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.9-alt1
2008-07-08 00:00:00
securityvulns
securityvulns
Apache multiple DoS conditions
2008-07-12 00:00:00
[ GLSA 200807-06 ] Apache: Denial of Service
2008-07-12 00:00:00
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-08-12 00:00:00
oraclelinux
oraclelinux
httpd security and bug fix update
2008-11-11 00:00:00
centos
centos
httpd, mod_ssl security update
2008-11-11 20:45:50
gentoo
gentoo
Apache: Denial of service
2008-07-09 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2009-03-10 00:00:00
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for NVD:CVE-2008-2364
openvas45nessus17debiancve1seebug1checkpoint_advisories1veracode1prion1cve1httpd2fedora2ubuntucve1cvelist1freebsd1redhat2altlinux3securityvulns3oraclelinux1centos1gentoo1ubuntu1kaspersky1oracle1