Evil-DB LogoEvil-DB
← All CVEs

CVE-2005-2728

medium · 5

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

5
CVSS
11.0%
EPSS (exploit prob.)
96th
EPSS percentile
2005-08-30
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
apachehttp_server2.0
apachehttp_server2.0.9
apachehttp_server2.0.28
apachehttp_server2.0.28
apachehttp_server2.0.32
apachehttp_server2.0.35
apachehttp_server2.0.36
apachehttp_server2.0.37
apachehttp_server2.0.38
apachehttp_server2.0.39
apachehttp_server2.0.40
apachehttp_server2.0.41
apachehttp_server2.0.42
apachehttp_server2.0.43
apachehttp_server2.0.44
apachehttp_server2.0.45
apachehttp_server2.0.46
apachehttp_server2.0.47
apachehttp_server2.0.48
apachehttp_server2.0.49
apachehttp_server2.0.50
apachehttp_server2.0.51
apachehttp_server2.0.52
apachehttp_server2.0.53

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-2728