ECHO-F759-D499-AD5C DoS (bandwidth consumption) via a Range header specifying multiple copies of the same fragment over a TCP connection with a large window size. The severity is explicitly disputed by third parties (NVD carries the "disputed" tag) because the large TCP window size the attack relies on is not normally supported or configured by the server, and the same effect is achievable by simply downloading the file. Red Hat states it "does not consider this issue to be a security vulnerability". Debian classifies it as an unimportant issue. No code change required in the shipped 2.4.68 build. https://security-tracker.debian.org/tracker/CVE-2007-0086
| Reporter | Title | Published | Views | Family All 26 |
|---|---|---|---|---|
 | CVE-2011-3192 | 29 Aug 201100:00 | – | attackerkb |
 | CVE-2007-0086 affecting package httpd 2.4.46-3 | 5 Nov 202004:21 | – | cbl_mariner |
 | CVE-2007-0086 vulnerabilities | 22 Mar 202504:12 | – | cgr |
 | CVE-2007-0086 | 5 Jan 200718:00 | – | cve |
 | CVE-2007-0086 | 5 Jan 200718:00 | – | cvelist |
 | CVE-2007-0086 | 5 Jan 200718:00 | – | debiancve |
 | U.S. Dept Of Defense: Out-of-date Version (Apache) | 24 Nov 201615:09 | – | hackerone |
 | MiracleLinux 3 : httpd-2.2.3-53.1.0.1.AXS3 (AXSA:2011-297:02) | 14 Jan 202600:00 | – | nessus |
| MiracleLinux 4 : httpd-2.2.15-9.2.0.1.AXS4 (AXSA:2011-459:01) | 14 Jan 202600:00 | – | nessus |
| Linux Distros Unpatched Vulnerability : CVE-2007-0086 | 24 Aug 202500:00 | – | nessus |
10
| Source | Link |
|---|---|
| advisory | www.advisory.echohq.com/cve/CVE-2007-0086 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Jul 2026 16:30Current
6.1Medium risk
Vulners AI Score6.1
CVSS 27.8
EPSS0.09619