CVE-2009-1891

Published: Jul 10, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[apache-httpd-dev] 20090628 mod_deflate DoS

mailing-list

x_refsource_MLIST

FEDORA-2009-8812

vendor-advisory

x_refsource_FEDORA

SUSE-SA:2009:050

vendor-advisory

x_refsource_SUSE

http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0142

x_refsource_CONFIRM

35781

third-party-advisory

x_refsource_SECUNIA

PK99480

vendor-advisory

x_refsource_AIXAPAR

oval:org.mitre.oval:def:12361

vdb-entry

signature

x_refsource_OVAL

MDVSA-2009:149

vendor-advisory

x_refsource_MANDRIVA

PK91361

vendor-advisory

x_refsource_AIXAPAR

SSRT090208

vendor-advisory

x_refsource_HP

RHSA-2009:1156

vendor-advisory

x_refsource_REDHAT

35865

third-party-advisory

x_refsource_SECUNIA

ADV-2009-1841

vdb-entry

x_refsource_VUPEN

37152

third-party-advisory

x_refsource_SECUNIA

1022529

vdb-entry

x_refsource_SECTRACK

[apache-httpd-dev] 20090703 Re: mod_deflate DoS

mailing-list

x_refsource_MLIST

DSA-1834

vendor-advisory

x_refsource_DEBIAN

20091113 rPSA-2009-0142-2 httpd mod_ssl

mailing-list

x_refsource_BUGTRAQ

oval:org.mitre.oval:def:8632

vdb-entry

signature

x_refsource_OVAL

HPSBUX02612

vendor-advisory

x_refsource_HP

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712

x_refsource_MISC

GLSA-200907-04

vendor-advisory

x_refsource_GENTOO

HPSBOV02683

vendor-advisory

x_refsource_HP

http://wiki.rpath.com/Advisories:rPSA-2009-0142

x_refsource_CONFIRM

RHSA-2009:1148

vendor-advisory

x_refsource_REDHAT

oval:org.mitre.oval:def:9248

vdb-entry

signature

x_refsource_OVAL

USN-802-1

vendor-advisory

x_refsource_UBUNTU

37221

third-party-advisory

x_refsource_SECUNIA

ADV-2009-3184

vdb-entry

x_refsource_VUPEN

SSRT100345

vendor-advisory

x_refsource_HP

35793

third-party-advisory

x_refsource_SECUNIA

https://bugzilla.redhat.com/show_bug.cgi?id=509125

x_refsource_CONFIRM

APPLE-SA-2009-11-09-1

vendor-advisory

x_refsource_APPLE

35721

third-party-advisory

x_refsource_SECUNIA

http://support.apple.com/kb/HT3937

x_refsource_CONFIRM

55782

vdb-entry

x_refsource_OSVDB

[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1888194 [5/13] - /httpd/site/trunk/content/security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073139 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210330 svn commit: r1073149 [6/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210603 svn commit: r1075360 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210606 svn commit: r1075467 [1/2] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2009-1891

Description

Affected Products

References