CVE-2009-2699

The Solaris pollset feature in the Event Port backend in poll/unix/port.c in the Apache Portable Runtime (APR) library before 1.3.9, as used in the Apache HTTP Server before 2.2.14 and other products, does not properly handle errors, which allows remote attackers to cause a denial of service (daemon hang) via unspecified HTTP requests, related to the prefork and event MPMs.

• CWE-667

• http://marc.info/?l=bugtraq&m=133355494609819&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://securitytracker.com/id?1022988Broken Link, Third Party Advisory, VDB Entry
• http://www.apache.org/dist/httpd/CHANGES_2.2.14Broken Link, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlThird Party Advisory
• http://www.securityfocus.com/bid/36596Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53666Third Party Advisory, VDB Entry
• https://issues.apache.org/bugzilla/show_bug.cgi?id=47645Issue Tracking, Vendor Advisory
• https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• http://marc.info/?l=bugtraq&m=133355494609819&w=2Issue Tracking, Mailing List, Third Party Advisory
• http://securitytracker.com/id?1022988Broken Link, Third Party Advisory, VDB Entry
• http://www.apache.org/dist/httpd/CHANGES_2.2.14Broken Link, Vendor Advisory
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:150Broken Link
• http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.htmlThird Party Advisory
• http://www.securityfocus.com/bid/36596Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53666Third Party Advisory, VDB Entry
• https://issues.apache.org/bugzilla/show_bug.cgi?id=47645Issue Tracking, Vendor Advisory
• https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r2295080a257bad27ea68ca0af12fc715577f9e84801eae116a33107e%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r75cbe9ea3e2114e4271bbeca7aff96117b50c1b6eb7c4772b0337c1f%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r9ea3538f229874c80a10af473856a81fbf5f694cd7f471cc679ba70b%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rad2acee3ab838b52c04a0698b1728a9a43467bf365bd481c993c535d%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rdca61ae990660bacb682295f2a09d34612b7bb5f457577fe17f4d064%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/reb7c64aeea604bf948467d9d1cab8ff23fa7d002be1964bcc275aae7%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3EMailing List, Patch
• https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b%40%3Ccvs.httpd.apache.org%3EMailing List, Patch

Published

Oct 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2693Directory traversal vulnerability in Apache Tomcat 5.5.0 thr…
• CVE-2009-2694The msn_slplink_process_msg function in libpurple/protocols/…
• CVE-2009-2695The Linux kernel before 2.6.31-rc7 does not properly prevent…
• CVE-2009-2696Cross-site scripting (XSS) vulnerability in jsp/cal/cal2.jsp…
• CVE-2009-2697The Red Hat build script for the GNOME Display Manager (GDM)…
• CVE-2009-2698The udp_sendmsg function in the UDP implementation in (1) ne…7.8
• CVE-2009-2700src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.…
• CVE-2009-2701Unspecified vulnerability in the Zope Enterprise Objects (ZE…
• CVE-2009-2702KDE KSSL in kdelibs 3.5.4, 4.2.4, and 4.3 does not properly …
• CVE-2009-2703libpurple/protocols/irc/msgs.c in the IRC protocol plugin in…
• CVE-2009-2704CA SiteMinder allows remote attackers to bypass cross-site s…
• CVE-2009-2705CA SiteMinder allows remote attackers to bypass cross-site s…