CVE-2008-2364 in Oracle HTTP Server
Summary
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
Reservation
05/21/2008
Disclosure
06/13/2008
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9596 | Oracle HTTP Server Web Listener resource management | 399 | Proof-of-Concept | Official fix | CVE-2008-2364 |