CVE-2005-2728: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 11% chance of exploitation in the next 30 days.

The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP header with a large Range field.

Affected products

• Apache HTTP Server: version 2.0 only; version 2.0.9 only; version 2.0.28 only; version 2.0.32 only; version 2.0.35 only; version 2.0.36 only; …

Published 2005-08-30. Last modified 2026-06-16.