⬇ Download holy card: ·
Saint Apache Killer, Who Asked for Too Many Slices
Patron of Apache web servers, the Range header, and requests that weigh more than the reply.
Life
On 24 August 2011 Michal Zalewski reported, and an exploit nicknamed Apache Killer made famous, a flaw in the byterange filter of the Apache HTTP Server. A single request with a Range header full of overlapping intervals forced the server to multiply memory and CPU enormously, until it buckled. A laptop was enough to bring down a site.
Prayer
O Saint Apache Killer, who asks for a thousand slices of the same page, let our servers know how to refuse an unreasonable Range. Amen.
How to celebrate
Celebrated by updating Apache past 2.2.20 and limiting greedy Range headers.
Ask for too many slices and you're left with no bread.