CVE-2009-1890: High severity Apache HTTP Server vulnerability
The streamreqbodycl function in modproxyhttp.c in the modproxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1890?
CVE-2009-1890 has a medium severity rating as it can lead to denial of service when exploiting the vulnerability.
How do I fix CVE-2009-1890?
To fix CVE-2009-1890, upgrade the Apache HTTP Server to version 2.3.3 or later.
What systems are affected by CVE-2009-1890?
CVE-2009-1890 affects multiple versions of Apache HTTP Server prior to 2.3.3, as well as specific versions of Fedora, Debian, and Ubuntu Linux.
What type of vulnerability is CVE-2009-1890?
CVE-2009-1890 is classified as a denial of service vulnerability in the Apache HTTP Server.
Can CVE-2009-1890 be exploited remotely?
Yes, CVE-2009-1890 can be remotely exploited by attackers to disrupt service.