CVE-2009-0751
NoneCVSS
—
EPSS
10.4%
Published
Mar 2, 2009
CISA due date
—
The record
Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | yaws | 0 | 1.80-1 |
| Debian:12 | yaws | 0 | 1.80-1 |
| Debian:13 | yaws | 0 | 1.80-1 |
| Debian:4.0 | yaws | 0 | 1.65-4etch1 |
| Debian:5.0 | yaws | 0 | 1.77-3+lenny1 |
Related vulnerabilities
- CVE-2011-4350 Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. Also affects yaws
- CVE-2017-10974 Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with… Also affects yaws
- CVE-2026-41983 Null pointer dereference vulnerability in the browser module. Impact: Successful… CWE-399
- CVE-2015-9252 An issue was discovered in QPDF before 7.0.0. CWE-399
- CVE-2012-0881 Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of… CWE-399
- CVE-2015-7944 The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x… CWE-399
- CVE-2015-8855 The semver package before 4.3.2 for Node.js allows attackers to cause a denial of service… CWE-399
- CVE-2015-8858 The uglify-js package before 2.6.0 for Node.js allows attackers to cause a denial of… CWE-399