IBM HTTP Server Denial-of-Service Vulnerability via mod_mem_cache

A denial-of-service vulnerability has been identified in IBM HTTP Server versions 8.5 and 9.0. The issue arises in the optional module mod_mem_cache, which can be exploited to disrupt normal service operations.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the server to become unresponsive or unavailable.

Remediation

Users are advised to upgrade to IBM HTTP Server Fix Pack 9.0.5.29 or later, or Fix Pack 8.5.5.30 or later. For both versions, additional interim fixes may be available and linked off the interim fix download page.