The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apache Httpd | — | Upgrade to the latest version of Apache HTTPD | Apr 12, 2012 | Aug 30, 2005 |
| Debian | — | Upgrade apache2 | Jul 30, 2024 | Aug 30, 2005 |
| Gentoo Linux | — | Upgrade www-servers/apache. | Oct 30, 2017 | Aug 30, 2005 |
| Hpux | — | Apply patch PHSS_34163 from HPApply patch PHSS_34123 from HPApply the remediation from HP for CVE-2005-2728 | Aug 11, 2017 | Aug 30, 2005 |
| Suse | — | Upgrade apache2Upgrade apache2-develUpgrade libapr0Upgrade apache2-preforkUpgrade apache2-worker | Feb 17, 2015 | Aug 30, 2005 |
| Ubuntu | — | Upgrade apache2-mpm-preforkUpgrade apache2-mpm-worker | Nov 8, 2024 | Aug 30, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub