| Package | Affected versions | Patched versions |
|---|---|---|
| http server | = 1.0= 1.0.2= 1.0.3= 1.0.5= 1.1= 1.1.1= 1.2= 1.2.4= 1.2.5= 1.2.6= 1.2.9= 1.3= 1.3.0= 1.3.1= 1.3.1.1= 1.3.10= 1.3.11= 1.3.12= 1.3.13= 1.3.14= 1.3.15= 1.3.16= 1.3.17= 1.3.18= 1.3.19= 1.3.2= 1.3.20= 1.3.22= 1.3.23= 1.3.24= 1.3.25= 1.3.26= 1.3.27= 1.3.28= 1.3.29= 1.3.3= 1.3.30= 1.3.31= 1.3.32= 1.3.33= 1.3.34= 1.3.35= 1.3.36= 1.3.37= 1.3.38= 1.3.39= 1.3.4= 1.3.41= 1.3.42= 1.3.5= 1.3.6= 1.3.65= 1.3.68= 1.3.7= 1.3.8= 1.3.9= 1.4.0= 1.99= 2.0= 2.0.28= 2.0.32= 2.0.34= 2.0.35= 2.0.36= 2.0.37= 2.0.38= 2.0.39= 2.0.40= 2.0.41= 2.0.42= 2.0.43= 2.0.44= 2.0.45= 2.0.46= 2.0.47= 2.0.48= 2.0.49= 2.0.50= 2.0.51= 2.0.52= 2.0.53= 2.0.54= 2.0.55= 2.0.56= 2.0.57= 2.0.58= 2.0.59= 2.0.60= 2.0.61= 2.0.63= 2.0.9= 2.1= 2.1.1= 2.1.2= 2.1.3= 2.1.4= 2.1.5= 2.1.6= 2.1.7= 2.1.8= 2.1.9= 2.2= 2.2.0= 2.2.1= 2.2.10= 2.2.11= 2.2.12= 2.2.13= 2.2.2= 2.2.3= 2.2.4= 2.2.6= 2.2.8= 2.2.9≤ 2.2.14 |
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free