Common Vulnerabilities and Exposures assigned an identifier CVE-2008-2364 to the following vulnerability:

The approxyhttpprocessresponse function in modproxyhttp.c in the modproxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

Fixed upstream in: 2.2.9 http://www.apache.org/dist/httpd/CHANGES2.2.9

Upsteam patch in 2.2.x branch: http://svn.apache.org/viewvc?view=rev&revision=666154

Other references: http://www.securityfocus.com/bid/29653 http://www.frsirt.com/english/advisories/2008/1798 http://secunia.com/advisories/30621 http://xforce.iss.net/xforce/xfdb/42987