Lucene search
RootSSV:11762HistoryJul 07, 2009 - 12:00 a.m.
Apache mod_proxy反向代理拒绝服务漏洞
2009-07-0700:00:00
Root
www.seebug.org
249
0.016 Low
EPSS
Percentile
86.2%
BUGTRAQ ID: 35565
CVE(CAN) ID: CVE-2009-1890
Apache HTTP Server是一款流行的Web服务器。
如果配置了反向代理的话，在Apache HTTP Server的mod_proxy模块中，mod_proxy_http.c的stream_reqbody_cl函数没有正确地处理数量超过了 Content-Length值的流数据。远程攻击者可以通过向受影响的代理进程发送特制的请求导致耗尽大量的CPU资源。
Apache 2.2.x
厂商补丁：
Apache Group
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=790587&r2=790586&pathrev=790587
Related
openvas
openvas
Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
2009-07-07 00:00:00
Apache 'mod_proxy_http.c' Denial Of Service Vulnerability
2009-07-07 00:00:00
RedHat Security Advisory RHSA-2009:1148
2009-07-29 00:00:00
debiancve
debiancve
CVE-2009-1890
2009-07-05 16:30:00
cbl_mariner
cbl_mariner
CVE-2009-1890 affecting package httpd 2.4.53-1
2022-11-24 00:45:35
CVE-2009-1890 affecting package httpd 2.4.53-1
2022-11-16 02:26:12
cve
cve
CVE-2009-1890
2009-07-05 16:30:00
nessus
nessus
CBL Mariner 2.0 Security Update: httpd (CVE-2009-1890)
2023-03-28 00:00:00
Apache < 2.2.12 Multiple Vulnerabilities
2009-08-03 00:00:00
Oracle Linux 5 : httpd (ELSA-2009-1148)
2013-07-12 00:00:00
httpd
httpd
Apache Httpd < 2.2.12 : mod_proxy reverse proxy DoS
2009-06-30 00:00:00
prion
prion
Code injection
2009-07-05 16:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:34:58
ubuntucve
ubuntucve
CVE-2009-1890
2009-07-05 00:00:00
oraclelinux
oraclelinux
httpd security update
2009-07-09 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2009-07-13 00:00:00
Apache regression
2009-08-19 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:149 ] apache
2009-07-09 00:00:00
Apache DoS
2009-07-09 00:00:00
redhat
redhat
(RHSA-2009:1148) Important: httpd security update
2009-07-09 00:00:00
(RHSA-2009:1155) Important: httpd security update
2009-07-14 00:00:00
(RHSA-2009:1156) Important: httpd security update
2009-07-14 00:00:00
centos
centos
httpd, mod_ssl security update
2009-07-14 12:16:38
debian
debian
[SECURITY] [DSA 1834-1] New apache2 packages fix denial of service
2009-07-15 19:01:57
[SECURITY] [DSA 1834-2] New apache/apache2-mpm-itk fix regression
2009-07-30 16:37:19
osv
osv
apache2 apache2-mpm-itk - denial of service
2009-07-15 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2009-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: httpd-2.2.13-1.fc11
2009-08-31 23:39:38
suse
suse
potential code execution in apache2,libapr1
2009-10-26 13:21:56
freebsd
freebsd
apache22 -- several vulnerabilities
2009-07-28 00:00:00
slackware
slackware
httpd
2009-08-02 15:33:03
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.12-alt1
2009-07-30 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2013
2013-04-16 00:00:00