Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Feb 9, 2005 |
| Apple Osx Apache2 | — | Apply OS X security update 2005-007 | Dec 16, 2011 | Feb 9, 2005 |
| Debian | — | Upgrade apache2 | Jul 30, 2024 | Feb 9, 2005 |
| Freebsd | — | Upgrade apache | Dec 10, 2025 | Nov 10, 2004 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Feb 9, 2005 |
| Suse | — | Upgrade apache2-workerUpgrade apache2Upgrade libapr0Upgrade apache2-docUpgrade apache2-develUpgrade apache2-preforkUpgrade apache2-example-pages | Feb 17, 2015 | Feb 9, 2005 |
| Ubuntu | — | Upgrade apache2-mpm-preforkUpgrade apache2-mpm-worker | Nov 8, 2024 | Feb 9, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub