CVE-2008-2364: Medium severity apache http server vulnerability
The approxyhttpprocessresponse function in modproxyhttp.c in the modproxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2364?
CVE-2008-2364 has a severity rating that indicates it can lead to denial of service due to memory consumption.
How do I fix CVE-2008-2364?
To fix CVE-2008-2364, it is recommended to upgrade to the latest version of Apache HTTP Server that addresses this vulnerability.
Which versions are affected by CVE-2008-2364?
CVE-2008-2364 affects Apache HTTP Server versions 2.0.63 and 2.2.8, among others.
Can CVE-2008-2364 be exploited remotely?
Yes, CVE-2008-2364 can be exploited remotely by a malicious HTTP server sending a large number of interim responses.
What type of attack does CVE-2008-2364 facilitate?
CVE-2008-2364 facilitates a denial of service attack due to memory exhaustion in the affected Apache HTTP server.