VULNERABILITY INTELLIGENCE

CVE-2005-2970

CVSS score5 MEDIUM
EPSS probability14.19%
CISA KEVNot currently listed
Published2005-10-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.

Weakness classification

  • CWE-770: Allocation of Resources Without Limits or Throttling

Primary references