CVE-2005-2970
Fixed in a distro release EPSS 14%
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Products: apache http_server, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation, fedoraproject fedora_core
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.0.55-1 |
| Debian 13 | apache2 | 2.0.55-1 |
| Debian 14 | apache2 | 2.0.55-1 |
| Red Hat Enterprise Linux 3 | httpd | 0:2.0.46-56.ent |
| Red Hat Enterprise Linux 3 | httpd-debuginfo | 0:2.0.46-56.ent |
| Red Hat Enterprise Linux 3 | httpd-devel | 0:2.0.46-56.ent |
| Red Hat Enterprise Linux 3 | mod_ssl | 1:2.0.46-56.ent |
| Red Hat Enterprise Linux 4 | httpd | 0:2.0.52-22.ent |
| Red Hat Enterprise Linux 4 | httpd-debuginfo | 0:2.0.52-22.ent |
| Red Hat Enterprise Linux 4 | httpd-devel | 0:2.0.52-22.ent |
| Red Hat Enterprise Linux 4 | httpd-manual | 0:2.0.52-22.ent |
| Red Hat Enterprise Linux 4 | httpd-suexec | 0:2.0.52-22.ent |
| Red Hat Enterprise Linux 4 | mod_ssl | 1:2.0.52-22.ent |