← Database

CVE-2009-1890

HIGH CVSS: 7.1 Published: 2009-07-05 Modified: 2026-06-16

Description

The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when a reverse proxy is configured, does not properly handle an amount of streamed data that exceeds the Content-Length value, which allows remote attackers to cause a denial of service (CPU consumption) via crafted requests.

Affected Platforms

Canonical Ubuntu LinuxRedhat Enterprise Linux EusApache Http ServerRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerFedoraproject FedoraRedhat Enterprise Linux Server AusDebian Debian Linux

Weakness Type

CWE-400

References