The mod_deflate module in Apache httpd 2.2.11 and earlier...
High severity
Unreviewed
Published
May 2, 2022
to the GitHub Advisory Database
•
Updated Feb 20, 2023
Description
Published by the National Vulnerability Database
Jul 10, 2009
Published to the GitHub Advisory Database
May 2, 2022
Last updated
Feb 20, 2023
The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associated network connection is closed, which allows remote attackers to cause a denial of service (CPU consumption).
References