CVE-2009-0751: Medium severity Yaws yaws vulnerability
Published Mar 2, 2009
·Updated
Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.
Affected Software
27 affected components
Yaws yaws<=1.79
Yaws yaws=1.50
Yaws yaws=1.51
Yaws yaws=1.52
Yaws yaws=1.53
Yaws yaws=1.54
Yaws yaws=1.55
Yaws yaws=1.56
Yaws yaws=1.57
Yaws yaws=1.58
Yaws yaws=1.61
Yaws yaws=1.62
Yaws yaws=1.63
Yaws yaws=1.64
Yaws yaws=1.65
Yaws yaws=1.66
Yaws yaws=1.67
Yaws yaws=1.68
Yaws yaws=1.70
Yaws yaws=1.71
Yaws yaws=1.72
Yaws yaws=1.73
Yaws yaws=1.74
Yaws yaws=1.75
Yaws yaws=1.76
Yaws yaws=1.77
Yaws yaws=1.78
Event History
Mar 2, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0751?
CVE-2009-0751 has a moderate severity level due to its potential to cause denial of service through memory consumption.
2
How do I fix CVE-2009-0751?
To fix CVE-2009-0751, upgrade Yaws to version 1.80 or later, which addresses this vulnerability.
3
Who is affected by CVE-2009-0751?
CVE-2009-0751 affects Yaws versions 1.79 and earlier, making those installations vulnerable to denial of service attacks.
4
What type of vulnerability is CVE-2009-0751?
CVE-2009-0751 is a denial of service vulnerability that arises from handling requests with an excessive number of headers.
5
Can CVE-2009-0751 be exploited remotely?
Yes, CVE-2009-0751 can be exploited remotely by attackers sending specifically crafted requests to the affected server.