CVE-2009-2699: High severity apache http server vulnerability
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2699?
CVE-2009-2699 has been assigned a medium severity rating due to its potential to cause a denial of service.
How do I fix CVE-2009-2699?
To fix CVE-2009-2699, upgrade to Apache Portable Runtime version 1.3.9 or later and Apache HTTP Server version 2.2.14 or later.
What software is affected by CVE-2009-2699?
CVE-2009-2699 affects the Apache HTTP Server prior to version 2.2.14 and the Apache Portable Runtime prior to version 1.3.9.
What kind of attack does CVE-2009-2699 allow?
CVE-2009-2699 allows remote attackers to cause a denial of service due to improper error handling.
Is CVE-2009-2699 a critical vulnerability?
CVE-2009-2699 is not classified as a critical vulnerability, but it still poses a significant risk for service disruptions.