CCE-94593-1| Platform: cpe:/a:apache:apache2.2 | Date: (C)2021-06-15 (M)2023-07-04 |
These requirements are set to mitigate the effects of several types of denial of service attacks. Although there is some latitude concerning the settings themselves, the requirements attempt to provide reasonable limits for the protection of the web server. If necessary, these limits can be adjusted to accommodate the operational requirement of a given system.
Parameter:
[256]
Technical Mechanism:
Open the httpd.conf file with an editor and search for the following directive:
MaxClients
Set the directive to a value of 256 or less, add the directive if it does not exist.
It is recommended that the directive be explicitly set to prevent unexpected results if the defaults change with updated software.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 7.5 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 3.6 | Privileges Required: NONE |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Scope: UNCHANGED |
| | Confidentiality: NONE |
| | Integrity: NONE |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:73552 |
