What is CVE-2009-2299?

CVE-2009-2299 is a vulnerability in Apache HTTP Server. Published 2009-07-02.

Is CVE-2009-2299 known to be exploited?

6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apache HTTP Server

CVE-2009-2299

The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.

EPSS: 0.043 (90.0th percentile) — read the EPSS interpretation.

Affected products

Apache Http_server
Hyperguard_web_application_firewall_project Hyperguard_web_application_firewall
N/a — versions n/a

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2009-2299?: CVE-2009-2299 is a vulnerability in Apache HTTP Server. Published 2009-07-02.
Is CVE-2009-2299 known to be exploited?: 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.