CVE:CVE-2009-1891
CNNVD:CNNVD-200907-157
Apache HTTP Server是一款流行的Web服务器。
Apache的mod_deflate模块中存在拒绝服务漏洞。如果使用该模块下载文件并在下载结束之前中断了连接，mod_deflate会消耗100%的CPU占用率来压缩文件。如果同时打开多个文件请求并很快中断连接，则几十MB大小的文件就会导致Apache锁死。
solution:Upgrade apache http_server to a higher version than 2.0.64,2.2.12,and avoid the version [2.0.35,2.0.64),[2.2.0,2.2.12); Upgrade debian debian_linux to a higher version than 4.0,5.0,6.0,and avoid the version 4.0,5.0,6.0; Upgrade fedoraproject fedora to a higher version than 11,and avoid the version 11; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,and avoid the version 6.06,8.04,8.10,9.04; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_eus to a higher version than 5.3,and avoid the version 5.3; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.3,and avoid the version 5.3; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0