Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2699
HistoryOct 13, 2009 - 12:00 a.m.

CVE-2009-2699

2009-10-1300:00:00
ubuntu.com
ubuntu.com
7

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.291 Low

EPSS

Percentile

96.8%

The Solaris pollset feature in the Event Port backend in poll/unix/port.c
in the Apache Portable Runtime (APR) library before 1.3.9, as used in the
Apache HTTP Server before 2.2.14 and other products, does not properly
handle errors, which allows remote attackers to cause a denial of service
(daemon hang) via unspecified HTTP requests, related to the prefork and
event MPMs.

Notes

Author Note
mdeslaur does not affect Linux

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.291 Low

EPSS

Percentile

96.8%