CVE-1999-1199: Apache HTTP Server

High severity, CVSS 10.0. EPSS: 7.6% chance of exploitation in the next 30 days.

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Affected products

• Apache HTTP Server: up to and including 1.3.1

Published 1998-08-07. Last modified 2026-06-16.