CVE-2003-0132

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 87.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-04-11 · updated 2026-06-16
Weakness: CWE-772

Description

A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a denial of service (memory consumption) via large chunks of linefeed characters, which causes Apache to allocate 80 bytes for each linefeed.

Affected products

Apache HTTP Server: from 2.0.0 through 2.0.44

References

http://lists.apple.com/mhonarc/security-announce/msg00028.html
http://marc.info/?l=bugtraq&m=104931360606484&w=2
http://marc.info/?l=bugtraq&m=104982175321731&w=2
http://marc.info/?l=bugtraq&m=104994239010517&w=2
http://marc.info/?l=bugtraq&m=104994309010974&w=2
http://marc.info/?l=bugtraq&m=105001663120995&w=2
http://marc.info/?l=bugtraq&m=105013378320711&w=2
http://secunia.com/advisories/34920
http://secunia.com/advisories/8499
http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147
http://www.idefense.com/advisory/04.08.03.txt
http://www.kb.cert.org/vuls/id/206537

Get alerted when CVE-2003-0132 or the next vulnerability affects your stack