CVE-2005-2970
UnknownEPSS 14.19%
Last modified
CVE-2005-2970 is a vulnerability of currently unknown severity. Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.. EPSS estimates a 14.19% chance of exploitation in the next 30 days.
Description
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Http Server | >= 2.0.36, < 2.0.55 |
| Canonical | Ubuntu Linux | 4.10 |
| Canonical | Ubuntu Linux | 5.04 |
| Canonical | Ubuntu Linux | 5.10 |
| Redhat | Enterprise Linux Desktop | 3.0 |
| Redhat | Enterprise Linux Desktop | 4.0 |
| Redhat | Enterprise Linux Server | 3.0 |
| Redhat | Enterprise Linux Server | 4.0 |
| Redhat | Enterprise Linux Workstation | 3.0 |
| Redhat | Enterprise Linux Workstation | 4.0 |
| Fedoraproject | Fedora Core | 4 |
References
- http://rhn.redhat.com/errata/RHSA-2006-0159.htmlThird Party Advisory
- http://secunia.com/advisories/16559Not Applicable
- http://secunia.com/advisories/17923Not Applicable
- http://secunia.com/advisories/18161Not Applicable
- http://secunia.com/advisories/18333Not Applicable
- http://secunia.com/advisories/18585Not Applicable
- http://securitytracker.com/id?1015093Broken Link, Third Party Advisory, VDB Entry
- http://svn.apache.org/viewcvs?rev=292949&view=revVendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.htmlMailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/425399/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/15762Third Party Advisory, VDB Entry
- https://www.ubuntu.com/usn/usn-225-1/Third Party Advisory
- http://rhn.redhat.com/errata/RHSA-2006-0159.htmlThird Party Advisory
- http://secunia.com/advisories/16559Not Applicable
- http://secunia.com/advisories/17923Not Applicable
- http://secunia.com/advisories/18161Not Applicable
- http://secunia.com/advisories/18333Not Applicable
- http://secunia.com/advisories/18585Not Applicable
- http://securitytracker.com/id?1015093Broken Link, Third Party Advisory, VDB Entry
- http://svn.apache.org/viewcvs?rev=292949&view=revVendor Advisory
- http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00060.htmlMailing List, Third Party Advisory
- http://www.securityfocus.com/archive/1/425399/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/15762Third Party Advisory, VDB Entry
- https://www.ubuntu.com/usn/usn-225-1/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-2970?
Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memory consumption) via aborted connections, which prevents the memory for the transaction pool from being reused for other connections.
How severe is CVE-2005-2970?
Severity scoring for CVE-2005-2970 is pending analysis. The EPSS model estimates a 14.19% probability of exploitation in the next 30 days.
How do I fix CVE-2005-2970?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2964Stack-based buffer overflow in AbiWord before 2.2.10 allows …
- CVE-2005-2965Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-2966The Python SVG import plugin (diasvg_import.py) for DIA 0.94…
- CVE-2005-2967Format string vulnerability in input_cdda.c in xine-lib 1-be…
- CVE-2005-2968Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute…
- CVE-2005-2969The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.…
- CVE-2005-2971Heap-based buffer overflow in the KWord RTF importer for KOf…
- CVE-2005-2972Multiple stack-based buffer overflows in the RTF import feat…
- CVE-2005-2973The udp_v6_get_port function in udp.c in Linux 2.6 before 2.…
- CVE-2005-2974libungif library before 4.1.0 allows attackers to cause a de…
- CVE-2005-2975io-xpm.c in the gdk-pixbuf XPM image rendering library in GT…
- CVE-2005-2976Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ be…
Are you affected by CVE-2005-2970?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST