CVE-2009-2699
Fixed in a distro release EPSS 14%
The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.
Products: apache http_server, apache portable_runtime
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Point of Sale 11 SP3 | apache2 | 2.2.34-70.12.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | apache2 | 2.2.34-70.12.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | apache2 | 2.2.34-70.12.1 |
| SUSE Linux Enterprise Server 11 SP4 | apache2 | 2.2.34-70.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | apache2 | 2.2.34-70.12.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | apache2 | 2.2.34-70.12.1 |
| SUSE Studio Onsite 1.3 | apache2 | 2.2.34-70.12.1 |
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 |