Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache 安全漏洞
Vulnerability Description
Mod_SSL是Apache服务器上的SSL实现，用来为Apache Web服务器提供加密支持。Apache Mod_SSL中包含一个输入过滤错误，远程攻击者可以利用这个漏洞对mod_ssl服务进行拒绝服务攻击。报告者使用第三方工具对使用mod_ssl服务的Apache进行测试，发现在ssl_io_input_getline()函数中存在一个漏洞。Apache在部分状态下没有关闭过滤器的SSL连接，相反是持续读取GETLINE/阻塞模式下的空闲请求。这样会导致ssl_io_input_getline()函
CVSS Information
N/A
Vulnerability Type
N/A