The deflate_in_filter function in the mod_deflate module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (resource consumption) via crafted request data that decompresses to a much larger size.
Upstream CVSS v2 Score: 5.0
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:U/RC:C
Affected Software Versions (affects Puppet Enterprise on Debian-based platforms only):
Resolved in: