DoS Apache 2.4.x mod_proxy DoS

Stato
Discussione chiusa ad ulteriori risposte.

B4ckdoor

Bannato
6 Luglio 2012
855
63
390
509
If apache is configured with mod_proxy module (for example in front of
a tomcat, or proxypassing requests to other backend servers), it is possible
to use all available memory on the server and potenatially cause an OOM
condition that requires a reboot. In our tests, a single requests was causing
apache to spin and keep allocating memory (gigabytes in seconds). A simple bash
script that does this X time can speed the process up.

Bug can be triggered in request or response.

http://pastebin.com/ytFF7qh8


I Hope you enjoy it.

 
Stato
Discussione chiusa ad ulteriori risposte.