CVEvulnerability

CVE-2009-2299

5.0 MEDIUM Published 2009-07-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-07-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.

Affected configurations

• hyperguard web application firewall project hyperguard web application firewall (< 2.5.5-11635) • hyperguard web application firewall project hyperguard web application firewall (>= 3.0 < 3.0.3-11636) • hyperguard web application firewall project hyperguard web application firewall (>= 3.1 < 3.1.1-11637)

Related

Referenced by CWE · observed example (3)

  • CWE-130 Improper Handling of Length Parameter Inconsistency weakness
  • CWE-240 Improper Handling of Inconsistent Structural Elements weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References