Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dwje-udsm-rkhm
Vulnerability ID VCID-dwje-udsm-rkhm
Aliases CVE-2009-1890
Summary A denial of service flaw was found in the mod_proxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
System Score Found at
epss 0.3787 https://api.first.org/data/v1/epss?cve=CVE-2009-1890
epss 0.3787 https://api.first.org/data/v1/epss?cve=CVE-2009-1890
epss 0.3787 https://api.first.org/data/v1/epss?cve=CVE-2009-1890
apache_httpd important https://httpd.apache.org/security/json/CVE-2009-1890.json
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-1890.json
https://api.first.org/data/v1/epss?cve=CVE-2009-1890
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1890
509375 https://bugzilla.redhat.com/show_bug.cgi?id=509375
536718 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=536718
CVE-2009-1890 https://httpd.apache.org/security/json/CVE-2009-1890.json
GLSA-200907-04 https://security.gentoo.org/glsa/200907-04
RHSA-2009:1148 https://access.redhat.com/errata/RHSA-2009:1148
RHSA-2009:1155 https://access.redhat.com/errata/RHSA-2009:1155
RHSA-2009:1160 https://access.redhat.com/errata/RHSA-2009:1160
USN-802-1 https://usn.ubuntu.com/802-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.97291
EPSS Score 0.3787
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-02T04:53:35.201080+00:00 Apache HTTPD Importer Import https://httpd.apache.org/security/json/CVE-2009-1890.json 38.6.0