CVE-2007-6750: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 70.5% chance of exploitation in the next 30 days.

The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.

Affected products

• Apache HTTP Server: up to and including 2.2.14; version 1.0 only; version 1.0.2 only; version 1.0.3 only; version 1.0.5 only; version 1.1 only; …

Published 2011-12-27. Last modified 2026-06-16.