Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0751

medium · 5

Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.

5
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2009-03-02
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
yawsyaws<= 1.79
yawsyaws1.50
yawsyaws1.51
yawsyaws1.52
yawsyaws1.53
yawsyaws1.54
yawsyaws1.55
yawsyaws1.56
yawsyaws1.57
yawsyaws1.58
yawsyaws1.61
yawsyaws1.62
yawsyaws1.63
yawsyaws1.64
yawsyaws1.65
yawsyaws1.66
yawsyaws1.67
yawsyaws1.68
yawsyaws1.70
yawsyaws1.71
yawsyaws1.72
yawsyaws1.73
yawsyaws1.74
yawsyaws1.75
yawsyaws1.76
yawsyaws1.77
yawsyaws1.78

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0751