Apache mod_ssl ssl_io_filter_cleanup Remote Denial Of Service Vulnerability

Apache mod_ssl ssl_io_filter_cleanup Remote Denial Of Service Vulnerability

Solution:
This issue has been addressed in Apache 2.0.50 and subsequent versions.

SUSE has released advisory SUSE-SR:2005:008 to address this issue. Please see the referenced advisory for more information.

Apache Software Foundation Apache 2.0

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0 a9

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.28

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.28 Beta

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.32

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.35

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.36

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.37

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.38

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.39

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.40

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.41

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.42

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.43

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.44

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

SuSE apache2-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-2.0.48-14 9.i586.rpm

SuSE apache2-devel-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-devel-2.0 .48-149.i586.rpm

SuSE apache2-example-pages-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-example-p ages-2.0.48-149.i586.rpm

SuSE apache2-leader-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-leader-2. 0.48-149.i586.rpm

SuSE apache2-prefork-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-prefork-2 .0.48-149.i586.rpm

SuSE apache2-worker-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/apache2-worker-2. 0.48-149.i586.rpm

SuSE libapr0-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/libapr0-2.0.48-14 9.i586.rpm

Apache Software Foundation Apache 2.0.45

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.46

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.47

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

Apache Software Foundation Apache 2.0.48

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

SuSE apache2-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-2.0.48-14 9.i586.rpm

SuSE apache2-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-2.0.4 8-149.x86_64.rpm

SuSE apache2-devel-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-devel-2.0 .48-149.i586.rpm

SuSE apache2-devel-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-devel -2.0.48-149.x86_64.rpm

SuSE apache2-doc-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-doc-2.0.4 8-149.i586.rpm

SuSE apache2-doc-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-doc-2 .0.48-149.x86_64.rpm

SuSE apache2-example-pages-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-example-p ages-2.0.48-149.i586.rpm

SuSE apache2-example-pages-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-examp le-pages-2.0.48-149.x86_64.rpm

SuSE apache2-leader-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-leader-2. 0.48-149.i586.rpm

SuSE apache2-leader-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-leade r-2.0.48-149.x86_64.rpm

SuSE apache2-metuxmpm-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-metuxmpm- 2.0.48-149.i586.rpm

SuSE apache2-metuxmpm-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-metux mpm-2.0.48-149.x86_64.rpm

SuSE apache2-prefork-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-prefork-2 .0.48-149.i586.rpm

SuSE apache2-prefork-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-prefo rk-2.0.48-149.x86_64.rpm

SuSE apache2-worker-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/apache2-worker-2. 0.48-149.i586.rpm

SuSE apache2-worker-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/apache2-worke r-2.0.48-149.x86_64.rpm

SuSE libapr0-2.0.48-149.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/libapr0-2.0.48-14 9.i586.rpm

SuSE libapr0-2.0.48-149.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/libapr0-2.0.4 8-149.x86_64.rpm

Apache Software Foundation Apache 2.0.49

Apache Software Foundation Apache Web Server 2.0.53
http://httpd.apache.org/download.cgi

SuSE apache2-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-2.0.49-27 .24.3.i586.rpm

SuSE apache2-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-2.0.4 9-27.24.3.x86_64.rpm

SuSE apache2-devel-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-devel-2.0 .49-27.24.3.i586.rpm

SuSE apache2-devel-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-devel -2.0.49-27.24.3.x86_64.rpm

SuSE apache2-doc-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-doc-2 .0.49-27.24.3.x86_64.rpm

SuSE apache2-example-pages-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-example-p ages-2.0.49-27.24.3.i586.rpm

SuSE apache2-example-pages-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-examp le-pages-2.0.49-27.24.3.x86_64.rpm

SuSE apache2-prefork-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-prefork-2 .0.49-27.24.3.i586.rpm

SuSE apache2-prefork-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-prefo rk-2.0.49-27.24.3.x86_64.rpm

SuSE apache2-worker-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/apache2-worker-2. 0.49-27.24.3.i586.rpm

SuSE apache2-worker-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/apache2-worke r-2.0.49-27.24.3.x86_64.rpm

SuSE libapr0-2.0.49-27.24.3.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/i586/libapr0-2.0.49-27 .24.3.i586.rpm

SuSE libapr0-2.0.49-27.24.3.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.1/rpm/x86_64/libapr0-2.0.4 9-27.24.3.x86_64.rpm