Staging Environment: Content and features may be unstable or change without notice.
Advisory details: apache_httpd / CVE-1999-1199
Advisory ID apache_httpd/CVE-1999-1199
Aliases
Summary A serious problem exists when a client sends a large number of headers with the same header name. Apache uses up memory faster than the amount of memory required to simply store the received data itself. That is, memory use increases faster and faster as more headers are received, rather than increasing at a constant rate. This makes a denial of service attack based on this method more effective than methods which cause Apache to use memory at a constant rate, since the attacker has to send less data.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
apache_httpd important
Reference id Reference type URL
CVE-1999-1199 https://httpd.apache.org/security/json/CVE-1999-1199.json
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.