CVE-2005-2970: Medium severity Apache HTTP Server vulnerability
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2970?
CVE-2005-2970 is classified as a medium severity vulnerability due to its potential to cause denial of service via memory leaks.
How do I fix CVE-2005-2970?
To fix CVE-2005-2970, it is recommended to upgrade to a patched version of Apache HTTP Server that addresses this memory leak issue.
Which versions are affected by CVE-2005-2970?
CVE-2005-2970 affects Apache 2 versions between 2.0.36 and 2.0.55 and various Linux distributions such as Ubuntu and Red Hat.
What type of attack does CVE-2005-2970 facilitate?
CVE-2005-2970 allows remote attackers to conduct denial of service attacks through memory consumption caused by aborted connections.
Is it safe to use Apache 2 versions later than 2.0.55 with respect to CVE-2005-2970?
Yes, using Apache 2 versions later than 2.0.55 mitigates the risks posed by CVE-2005-2970 as they contain fixes for the vulnerability.