Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-6750

68
FAUCET Score

CVE-2007-6750 describes a denial-of-service vulnerability affecting Apache HTTP Server versions 1.x and 2.x, allowing remote attackers to cause a daemon outage through partial HTTP requests. This vulnerability, famously exploited by the Slowloris attack, stems from the absence of the mod_reqtimeout module in versions prior to 2.2.15. With a CVSS score of 5.0 and a FAUCET Risk Score of 98/100, it presents a moderate to high risk due to its low attack complexity and potential for system unavailability. While not on CISA's KEV list, a Metasploit module exists for the Slowloris attack, indicating readily available exploit code, though there is minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.2.14CPE matchmatch criteria
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
1.0CPE matchmatch criteria
cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*
1.0.2CPE matchmatch criteria
cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*
1.0.3CPE matchmatch criteria
cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*
1.0.5CPE matchmatch criteria
cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
71.63%
Probability of exploitation in next 30 days
EPSS Percentile
99.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: Slowloris Denial of Service Attack · Jun 17, 2009
This CVE's current EPSS score of 0.7163 is in the 100th percentile among its peer group of 23,705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (3)

redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: httpd
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: httpd
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: httpd

Vendor Advisories (1)

redhatCVE-2007-6750Low

httpd: Apache Slowloris denial of service

Jun 17, 2009

References

archives.neohapsis.com / archives/bugtraq/2007-01/0229.html
ha.ckers.org / slowloris
lists.opensuse.org / opensuse-security-announce/2012-02/msg00026.html
lists.opensuse.org / opensuse-security-announce/2012-03/msg00002.html
marc.info
exchange.xforce.ibmcloud.com / vulnerabilities/72345
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
h20566.www2.hpe.com / portal/site/hpsc/public/kb/docDisplay
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19481
securityfocus.com / bid/21865
securitytracker.com / id/1038144