Skip to content
OpenAdvisories
Unscored DSA-1834-1 2 CVEs

apache2 apache2-mpm-itk - denial of service

Published Jul 15, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 apache2 2.2.3-4+etch9
Debian · 5.0 apache2 2.2.9-10+lenny4

Vulnerabilities 2

  • Unscored —
    CVE-2009-1890 EPSS 16%

    The stream_reqbody_cl function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server before 2.3.3, when…

  • Unscored —
    CVE-2009-1891 EPSS 17%

    The mod_deflate module in Apache httpd 2.2.11 and earlier compresses large files until completion even after the associ…