CVE-2008-2364
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...
5.0 MediumFix available
CVE-2008-2364 is a medium vulnerability (CVSS 5.0) in Apache Http Server, published June 13, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.7%, the 96th percentile. Fixed in apache2 2.2.9-1.
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
Exploit likelihood
12.7%Up 1.9 points since Feb 4, 2022
What each source reports
NVD Score used
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
CVE-2008-2364- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-770
- Updated
- 2026-11-02
CVE List No score
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
CVE-2008-2364- Updated
- 2026-11-02
EUVDEUVD-2008-2360 No score
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
EUVD-2008-2360- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jjpp-hx4r-hqpc No score
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the...
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
GHSA-jjpp-hx4r-hqpc- Weakness
- CWE-770
- Updated
- 2026-11-02
OSV No score
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
CVE-2008-2364- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2364 No score
The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.
- Record
DEBIAN-CVE-2008-2364- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.9-1 | 2.2.9-1 |
apache2Debian:13 |
before 2.2.9-1 | 2.2.9-1 |
apache2Debian:14 |
before 2.2.9-1 | 2.2.9-1 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.10-1.el5s2 | 0:2.2.10-1.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.10-1.el5s2 | 1:2.2.10-1.el5s2 |
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
Show 122 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 |
before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:3.51.26r1127-1.el5s2 | 0:3.51.26r1127-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.60sp1-1.el5s2 | 0:5.0.60sp1-1.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.008-2.el5s2 | 0:4.008-2.el5s2 |
perl-DBD-PgRed Hat:rhel_application_stack:2 |
before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBD-Pg-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.49-4.el5s2 | 0:1.49-4.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 |
before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.607-3.el5s2 | 0:1.607-3.el5s2 |
php-pearRed Hat:rhel_application_stack:2 |
before 1:1.7.2-2.el5s2 | 1:1.7.2-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.11-1.el5s2 | 0:8.2.11-1.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 |
before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.1.14-1.el5s2 | 0:8.1.14-1.el5s2 |
httpdRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::as |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::as |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::desktop |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::desktop |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::es |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::es |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
httpd-develRed Hat:enterprise_linux:3::ws |
before 0:2.0.46-71.ent | 0:2.0.46-71.ent |
mod_sslRed Hat:enterprise_linux:3::ws |
before 1:2.0.46-71.ent | 1:2.0.46-71.ent |
httpdRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws |
before 0:2.0.52-41.ent.2 | 0:2.0.52-41.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws |
before 1:2.0.52-41.ent.2 | 1:2.0.52-41.ent.2 |
httpdRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::client |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::client |
before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
httpdRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-develRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
httpd-manualRed Hat:enterprise_linux:5::server |
before 0:2.2.3-11.el5_2.4 | 0:2.2.3-11.el5_2.4 |
mod_sslRed Hat:enterprise_linux:5::server |
before 1:2.2.3-11.el5_2.4 | 1:2.2.3-11.el5_2.4 |
antRed Hat:certificate_system:7.3 |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
secunia.com/advisories/34259
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11713
marc.info?l=bugtraq&m=125631037611762&w=2
Show 194 moreShow less
sunsolve.sun.com/search/document.do?assetkey=1-26-247666-1
securityfocus.com/bid/31681
oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
rhn.redhat.com/errata/RHSA-2008-0967.html
exchange.xforce.ibmcloud.com/vulnerabilities/42987
securitytracker.com/id?1020267
svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154
ubuntu.com/usn/USN-731-1
vupen.com/english/advisories/2009/0320
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432
www-01.ibm.com/support/docview.wss?uid=swg27008517
redhat.com/support/errata/RHSA-2008-0966.html
security.gentoo.org/glsa/glsa-200807-06.xml
mandriva.com/security/advisories?name=MDVSA-2008:237
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
support.apple.com/kb/HT3216
www-1.ibm.com/support/docview.wss?uid=swg1PK67579
wiki.rpath.com/wiki/Advisories:rPSA-2008-0328
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2008-2364
github.com/advisories/GHSA-jjpp-hx4r-hqpc
security-tracker.debian.org/tracker/CVE-2008-2364
access.redhat.com/errata/RHSA-2008:0966
bugzilla.redhat.com/show_bug.cgi?id=451615
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0966.json
cve.org/CVERecord?id=CVE-2007-6420
suse.com/security/cve/CVE-2005-3352
This page doesn't list everything
Left out here: 83 references. The JSON record has them.