Description
The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
Remediation
References
Related Vulnerabilities
Drupal Core 4.6.x Session Fixation (4.6.0 - 4.6.5)
WordPress Plugin Schema App Structured Data Unspecified Vulnerability (0.5.4)
Moodle Numeric Errors Vulnerability (CVE-2011-4305)
WordPress Plugin Hover Effects Builder Free Cross-Site Scripting (1.0.3)
Roundcube Cross-site Request Forgery (CSRF) Vulnerability (CVE-2016-4069)