Description
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
Published: 2004-09-01
Score: 5.0 Medium
EPSS: 15.7% Moderate
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839 cve-icon cve-icon
http://issues.apache.org/bugzilla/show_bug.cgi?id=27106 cve-icon cve-icon
http://marc.info/?l=apache-cvs&m=107869699329638 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=108034113406858&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=108369640424244&w=2 cve-icon cve-icon
http://marc.info/?l=bugtraq&m=108731648532365&w=2 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200403-04.xml cve-icon cve-icon
http://www.apacheweek.com/features/security-20 cve-icon cve-icon
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:043 cve-icon cve-icon
http://www.osvdb.org/4182 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2004-084.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2004-182.html cve-icon cve-icon
http://www.securityfocus.com/bid/9826 cve-icon cve-icon
http://www.trustix.org/errata/2004/0017 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/15419 cve-icon cve-icon
https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2004-0113 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A876 cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2004-0113 cve-icon
History

No history.

Subscriptions

Apache Http Server
Redhat Enterprise Linux Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-08T00:10:03.340Z

Reserved: 2004-02-02T00:00:00.000Z

Link: CVE-2004-0113

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-03-29T05:00:00.000

Modified: 2026-04-16T00:27:16.627

Link: CVE-2004-0113

cve-icon Redhat

Severity :

Publid Date: 2004-02-20T00:00:00Z

Links: CVE-2004-0113 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses