Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:23099
HistoryApr 10, 2020 - 12:15 a.m.

Denial Of Service (DoS)

2020-04-1000:15:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

httpd is vulnerable to denial of service. A flaw was found in the Apache HTTP Server mod_proxy module. On sites where a reverse proxy is configured, a remote attacker could send a carefully crafted request that would cause the Apache child process handling that request to crash. On sites where a forward proxy is configured, an attacker could cause a similar crash if a user could be persuaded to visit a malicious site using the proxy. This could lead to a denial of service if using a threaded Multi-Processing Module.

References

Related

prion 1
nessus 25
securityvulns 4
centos 2
httpd 2
debiancve 1
ubuntucve 1
redhat 4
cve 1
openvas 32
fedora 2
slackware 1
oraclelinux 3
altlinux 3
suse 1
freebsd 1
gentoo 1
vmware 2
ubuntu 1
oracle 1
prion
prion
Buffer overflow
2007-08-23 22:17:00
nessus
nessus
Scientific Linux Security Update : httpd on SL4.x i386/x86_64
2012-08-01 00:00:00
CentOS 4 : httpd (CESA-2007:0747)
2013-06-29 00:00:00
RHEL 5 : httpd (RHSA-2007:0746)
2007-11-08 00:00:00
securityvulns
securityvulns
Apache mod_proxy denial of service
2007-09-14 00:00:00
[Full-disclosure] rPSA-2007-0182-1 httpd mod_ssl
2007-09-14 00:00:00
About the security content of Security Update 2008-003 / Mac OS X 10.5.3
2008-05-30 00:00:00
centos
centos
httpd, mod_ssl security update
2007-11-25 11:09:37
httpd, mod_ssl security update
2008-01-15 12:48:29
httpd
httpd
Apache Httpd < 2.2.6 : mod_proxy crash
2006-12-10 00:00:00
Apache Httpd < 2.0.61 : mod_proxy crash
2006-12-10 00:00:00
debiancve
debiancve
CVE-2007-3847
2007-08-23 22:17:00
ubuntucve
ubuntucve
CVE-2007-3847
2007-08-23 00:00:00
redhat
redhat
(RHSA-2007:0747) Moderate: httpd security, bug fix, and enhancement update
2007-11-15 00:00:00
(RHSA-2007:0746) Moderate: httpd security, bug fix, and enhancement update
2007-11-07 00:00:00
(RHSA-2007:0911) Moderate: httpd security update
2007-10-25 00:00:00
cve
cve
CVE-2007-3847
2007-08-23 22:17:00
openvas
openvas
HP-UX Update for Apache HPSBUX02273
2009-05-05 00:00:00
Mandriva Update for apache MDKSA-2007:235 (apache)
2009-04-09 00:00:00
Fedora Update for httpd FEDORA-2007-707
2009-02-27 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: httpd-2.2.6-1.fc6
2007-09-24 20:29:48
[SECURITY] Fedora 7 Update: httpd-2.2.6-1.fc7
2007-09-19 02:53:28
slackware
slackware
[slackware-security] apache
2008-02-15 01:23:13
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2007-11-27 00:00:00
httpd security, bug fix, and enhancement update
2007-11-19 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.2.5-alt1
2007-08-18 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.5-alt1
2007-08-18 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.5-alt1
2007-08-18 00:00:00
suse
suse
remote denial of service in apache2
2007-11-19 15:20:20
freebsd
freebsd
apache -- multiple vulnerabilities
2007-09-07 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2007-11-07 00:00:00
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:23099
prion1nessus25securityvulns4centos2httpd2debiancve1ubuntucve1redhat4cve1openvas32fedora2slackware1oraclelinux3altlinux3suse1freebsd1gentoo1vmware2ubuntu1oracle1