| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.2.0, < 2.2.29≥ 2.4.1, < 2.4.10 | 2.2.292.4.10 |
| jboss enterprise application platform | = 6.0.0= 6.4.0 |
The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free