PT-2005-3811 · Apache+1 · Apache Http Server+1

Published 2005-10-14 · Updated 2023-02-13 · CVE-2005-2970

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apache 2 (affected versions not specified)

Description A memory leak in the worker MPM allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections. The severity of this issue was downgraded to low as successful exploitation of the race condition would be difficult.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2005-2970

RHSA-2006:0159

RHSA-2006_0159

Affected Products

Apache Http Server

Red Hat

References · 38

• https://osv.dev/vulnerability/CVE-2005-2970 · Vendor Advisory
• http://securityfocus.com/archive/1/425399/100/0/threaded · Vendor Advisory
• http://novell.com/linux/security/advisories/2005_28_sr.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-2970 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0159.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-2970 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:233 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2006-January/msg00060.html · Vendor Advisory
• https://ubuntu.com/usn/usn-225-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2970 · Security Note
• http://svn.apache.org/viewcvs?rev=292949&view=rev · Vendor Advisory
• https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E · Note
• https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E · Note
• http://secunia.com/advisories/17923 · Note
• http://mail-archives.apache.org/mod_mbox/httpd-cvs/200509.mbox/%3C20051001110218.40692.qmail%40minotaur.apache.org%3E · Note