Denial of Service Vulnerability in Apache2::Request by Apache Software Foundation

CVE-2006-0042

What is CVE-2006-0042?

A vulnerability exists in the Apache2::Request library (Libapreq2) prior to version 2.07, specifically in the apreq_parse_headers and apreq_parse_urlencoded functions. This flaw allows remote attackers to exploit the library, leading to denial of service through excessive CPU consumption. The attack vectors remain unspecified, but the nature of the vulnerability suggests that it can be triggered by manipulating input data, resulting in quadratic computational complexity and degrading performance of affected systems.

References