Description
Cytrix has detected that the Version of Apache HTTP Server being used is vulnerable to Allocation of Resources Without Limits or Throttling (CWE-770). Also known as CVE-2008-2364.
By abusing the ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module, remote HTTP servers can send large number of interim responses.
That will cause a Denial of Service (DoS) through memory consumption.
This will cause a decrease in performance and also for interruptions in the availability of resources.
Recommendation
To fix CVE-2008-2364, upgrade the version of Apache HTTP Server being used to 2.2.9 or higher.
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364
