General Information

Web Server Thread Pool Occupation

Variants:
Direct 

Also Known As:
Slowloris DoS Attack, RUDY Attack

Vector Type:
Attack

Relevance:
Generic

Layer:
Web-Infrastructure-Level

Platforms:
Any

Target Type:
Web Application

Affected Mechanisms:
Web Server Configuration, Hardening

Invented In:
01/01/1999

Added In:
25/12/2014


Vector Operation Method:
Deny services from legitimate users by repeatedly occupying web server threads in servers with a predefined thread limitation.


Direct Variant:

Web Server Thread Occupation

Also Known As:
Web Server Thread Pool Occupation

Typical Severity:
Major

Resources:

White Papers:

Learn More: