PT-2005-3811 · Apache+1 · Apache Http Server+1

CVE-2005-2970 · Publicado 2005-10-14 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache 2 (affected versions not specified)

Description A memory leak in the worker MPM allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections. The severity of this issue was downgraded to low as successful exploitation of the race condition would be difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2005-2970

RHSA-2006:0159

RHSA-2006_0159

Produtos afetados

Apache Http Server

Red Hat

Referências · 38

• https://osv.dev/vulnerability/CVE-2005-2970 · Aviso do Fabricante
• http://securityfocus.com/archive/1/425399/100/0/threaded · Aviso do Fabricante
• https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E · Nota
• http://secunia.com/advisories/17923 · Nota
• http://mail-archives.apache.org/mod_mbox/httpd-cvs/200509.mbox/%3C20051001110218.40692.qmail%40minotaur.apache.org%3E · Nota
• https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E · Nota
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E · Nota
• http://novell.com/linux/security/advisories/2005_28_sr.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-2970 · Aviso do Fabricante
• https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E · Nota
• http://secunia.com/advisories/18585 · Nota
• http://securitytracker.com/id?1015093 · Nota
• https://access.redhat.com/errata/RHSA-2006:0159 · Nota
• https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E · Nota