You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mj...@apache.org on 2010/10/20 14:19:40 UTC
svn commit: r1025531 - in /httpd/site/trunk:
docs/security/vulnerabilities-oval.xml
docs/security/vulnerabilities_20.html docs/security/vulnerabilities_22.html
xdocs/security/vulnerabilities-httpd.xml
Author: mjc
Date: Wed Oct 20 12:19:40 2010
New Revision: 1025531
URL: http://svn.apache.org/viewvc?rev=1025531&view=rev
Log:
Slight wordsmithing for accuracy after discussion with Joe Orton
Modified:
httpd/site/trunk/docs/security/vulnerabilities-oval.xml
httpd/site/trunk/docs/security/vulnerabilities_20.html
httpd/site/trunk/docs/security/vulnerabilities_22.html
httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml
Modified: httpd/site/trunk/docs/security/vulnerabilities-oval.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities-oval.xml?rev=1025531&r1=1025530&r2=1025531&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities-oval.xml (original)
+++ httpd/site/trunk/docs/security/vulnerabilities-oval.xml Wed Oct 20 12:19:40 2010
@@ -138,8 +138,9 @@ be a denial of service if using the work
<description>
A flaw was found in the apr_brigade_split_line() function of the bundled
APR-util library, used to process non-SSL requests. A remote attacker
-could send carefully crafted requests which would slowly consume
-memory, potentially leading to a denial of service.
+could send requests, carefully crafting the timing of individual bytes,
+which would slowly consume memory, potentially leading to a denial of
+service.
</description>
<apache_httpd_repository>
<public>20101001</public>
Modified: httpd/site/trunk/docs/security/vulnerabilities_20.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_20.html?rev=1025531&r1=1025530&r2=1025531&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_20.html [utf-8] (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_20.html [utf-8] Wed Oct 20 12:19:40 2010
@@ -177,8 +177,9 @@ be a denial of service if using the work
<p>
A flaw was found in the apr_brigade_split_line() function of the bundled
APR-util library, used to process non-SSL requests. A remote attacker
-could send carefully crafted requests which would slowly consume
-memory, potentially leading to a denial of service.
+could send requests, carefully crafting the timing of individual bytes,
+which would slowly consume memory, potentially leading to a denial of
+service.
</p>
</dd>
<dd>
Modified: httpd/site/trunk/docs/security/vulnerabilities_22.html
URL: http://svn.apache.org/viewvc/httpd/site/trunk/docs/security/vulnerabilities_22.html?rev=1025531&r1=1025530&r2=1025531&view=diff
==============================================================================
--- httpd/site/trunk/docs/security/vulnerabilities_22.html [utf-8] (original)
+++ httpd/site/trunk/docs/security/vulnerabilities_22.html [utf-8] Wed Oct 20 12:19:40 2010
@@ -149,8 +149,9 @@ be a denial of service if using the work
<p>
A flaw was found in the apr_brigade_split_line() function of the bundled
APR-util library, used to process non-SSL requests. A remote attacker
-could send carefully crafted requests which would slowly consume
-memory, potentially leading to a denial of service.
+could send requests, carefully crafting the timing of individual bytes,
+which would slowly consume memory, potentially leading to a denial of
+service.
</p>
</dd>
<dd>
Modified: httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml
URL: http://svn.apache.org/viewvc/httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml?rev=1025531&r1=1025530&r2=1025531&view=diff
==============================================================================
--- httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml [utf-8] (original)
+++ httpd/site/trunk/xdocs/security/vulnerabilities-httpd.xml [utf-8] Wed Oct 20 12:19:40 2010
@@ -139,8 +139,9 @@ be a denial of service if using the work
<description><p>
A flaw was found in the apr_brigade_split_line() function of the bundled
APR-util library, used to process non-SSL requests. A remote attacker
-could send carefully crafted requests which would slowly consume
-memory, potentially leading to a denial of service.
+could send requests, carefully crafting the timing of individual bytes,
+which would slowly consume memory, potentially leading to a denial of
+service.
</p>
</description>
<affects prod="httpd" version="2.2.16"/>
@@ -167,8 +168,9 @@ memory, potentially leading to a denial
<description><p>
A flaw was found in the apr_brigade_split_line() function of the bundled
APR-util library, used to process non-SSL requests. A remote attacker
-could send carefully crafted requests which would slowly consume
-memory, potentially leading to a denial of service.
+could send requests, carefully crafting the timing of individual bytes,
+which would slowly consume memory, potentially leading to a denial of
+service.
</p>
</description>
<affects prod="httpd" version="2.0.63"/>