Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2011-3192
HistoryAug 29, 2011 - 3:55 p.m.

CVE-2011-3192

2011-08-2915:55:02
CWE-400
redhat
web.nvd.nist.gov
4032
In Wild
2
apache
http server
denial of service
vulnerability
remote attack
cve-2011-3192

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.963

Percentile

99.6%

JSON

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Affected configurations

Nvd
Node
apachehttp_serverRange2.0.35–2.0.65
OR
apachehttp_serverRange2.2.0–2.2.20
Node
opensuseopensuseMatch11.3
OR
opensuseopensuseMatch11.4
OR
suselinux_enterprise_serverMatch10sp2-
OR
suselinux_enterprise_serverMatch10sp3-
OR
suselinux_enterprise_serverMatch10sp4-
OR
suselinux_enterprise_serverMatch11sp1-
OR
suselinux_enterprise_serverMatch11sp1vmware
OR
suselinux_enterprise_software_development_kitMatch10sp3
OR
suselinux_enterprise_software_development_kitMatch10sp4
OR
suselinux_enterprise_software_development_kitMatch11sp1
Node
canonicalubuntu_linuxMatch8.04-
OR
canonicalubuntu_linuxMatch10.04-
OR
canonicalubuntu_linuxMatch10.10
OR
canonicalubuntu_linuxMatch11.04
VendorProductVersionCPE
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
opensuseopensuse11.3cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
opensuseopensuse11.4cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
suselinux_enterprise_server10cpe:2.3:o:suse:linux_enterprise_server:10:sp2:*:*:-:*:*:*
suselinux_enterprise_server10cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:-:*:*:*
suselinux_enterprise_server10cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*
suselinux_enterprise_server11cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:-:*:*
suselinux_enterprise_server11cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*
suselinux_enterprise_software_development_kit10cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:*:*:*:*:*:*
suselinux_enterprise_software_development_kit10cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4:*:*:*:*:*:*
Rows per page:
1-10 of 151

References

Social References

More

Related

nessus 41
prion 3
openvas 49
cvelist 3
debiancve 2
ubuntucve 1
nvd 3
freebsd 1
cert 1
suse 8
hackerone 3
redhat 10
httpd 2
altlinux 3
packetstorm 4
exploitpack 1
ibm 2
debian 5
amazon 1
threatpost 2
fedora 2
veracode 1
f5 2
centos 2
cisa 1
checkpoint_advisories 2
zdt 3
seebug 3
checkpoint_security 1
ubuntu 1
securityvulns 10
oraclelinux 2
metasploit 1
slackware 2
attackerkb 1
cve 2
exploitdb 2
osv 2
jvn 1
nmap 1
redhatcve 1
cbl_mariner 1
kaspersky 1
gentoo 1
oracle 3
nessus
nessus
Amazon Linux AMI : httpd (ALAS-2011-01)
2013-09-04 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2011:130-1)
2011-09-06 00:00:00
RHEL 5 : httpd (RHSA-2011:1294)
2013-01-24 00:00:00
prion
prion
Code injection
2011-08-29 15:55:00
Race condition
2023-09-08 03:15:00
Code injection
2007-01-05 18:28:00
openvas
openvas
FreeBSD Ports: apache, apache-event, apache-itk, apache-peruser, apache-worker
2011-09-21 00:00:00
Mandriva Update for apache MDVSA-2011:130 (apache)
2011-09-07 00:00:00
Mandriva Update for apache MDVSA-2011:130 (apache)
2011-09-07 00:00:00
cvelist
cvelist
CVE-2011-3192
2011-08-29 15:00:00
CVE-2014-5329
2023-09-08 02:52:41
CVE-2007-0086
2007-01-05 18:00:00
debiancve
debiancve
CVE-2011-3192
2011-08-29 15:55:02
CVE-2007-0086
2007-01-05 18:28:00
ubuntucve
ubuntucve
CVE-2011-3192
2011-08-29 00:00:00
nvd
nvd
CVE-2011-3192
2011-08-29 15:55:02
CVE-2014-5329
2023-09-08 03:15:07
CVE-2007-0086
2007-01-05 18:28:00
freebsd
freebsd
apache -- Range header DoS vulnerability
2011-08-24 00:00:00
cert
cert
Apache HTTPD 1.3/2.x Range header DoS vulnerability
2011-08-26 00:00:00
suse
suse
apache2: Fixed a remote denial of service via byte-ranges (important)
2011-09-02 18:08:23
Security update for Apache (important)
2011-09-06 18:08:19
Security update for Apache (important)
2011-09-06 10:08:12
hackerone
hackerone
Gratipay: grtp.co is vulnerable to http-vuln-cve2011-3192
2016-01-25 13:01:41
ownCloud: Apache Range Header Denial of Service Attack (Confirmed PoC)
2015-09-14 22:55:12
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
redhat
redhat
(RHSA-2011:1330) Important: JBoss Enterprise Web Server 1.0.2 security update
2011-09-21 16:00:45
(RHSA-2011:1369) Important: httpd security update
2011-10-13 00:00:00
(RHSA-2011:1294) Important: httpd security update
2011-09-14 00:00:00
httpd
httpd
Apache Httpd < 2.2.20 : Range header remote DoS
2011-08-20 00:00:00
Apache Httpd < 2.0.65 : Range header remote DoS
2011-08-20 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
packetstorm
packetstorm
Obehotel CMS Denial Of Service / SQL Injection
2013-08-26 00:00:00
Apache Range Header Denial of Service (Apache Killer)
2024-08-31 00:00:00
Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS
2013-10-07 00:00:00
exploitpack
exploitpack
Apache - Denial of Service
2011-12-09 00:00:00
ibm
ibm
Security Bulletin: API Connect is affected by an Apache HTTP Server vulnerability (CVE-2011-3192)
2018-06-15 07:07:54
Security Bulletin: Potential security exposure with IBM HTTP Server 8.0 and earlier (PM46234) (CVE-2011-3192)
2022-09-08 00:26:26
debian
debian
[BSA-049] Security Update for apache2
2011-09-06 02:06:51
[SECURITY] [DSA 2298-2] apache2 regression fix
2011-09-05 19:20:44
[SECURITY] [DSA 2298-1] apache2 security update
2011-08-29 21:16:25
amazon
amazon
Medium: httpd
2011-09-27 22:46:00
threatpost
threatpost
Apache Fixes Range Header DoS Flaw
2011-08-31 10:30:00
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
fedora
fedora
[SECURITY] Fedora 16 Update: httpd-2.2.21-1.fc16
2011-09-30 19:07:35
[SECURITY] Fedora 15 Update: httpd-2.2.21-1.fc15
2011-09-16 01:58:28
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:02:22
f5
f5
K13114 : Apache Range header vulnerability - CVE-2011-3192
2013-09-12 00:00:00
SOL13114 - Apache Range header vulnerability - CVE-2011-3192
2011-10-06 00:00:00
centos
centos
httpd, mod_ssl security update
2011-09-01 11:41:08
httpd, mod_ssl security update
2011-10-20 21:19:56
cisa
cisa
Oracle Releases Security Alert for Oracle HTTP Server Products
2011-09-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTPD Ranges Header Field Denial of Service (CVE-2011-3192)
2011-09-14 00:00:00
Apache HTTPD Ranges Header Field Denial of Service - ver 2 (CVE-2011-3192)
2010-02-25 00:00:00
zdt
zdt
Obehotel CMS SQL Injection Vulnerability
2013-08-27 00:00:00
Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS
2013-10-08 00:00:00
Apache HTTP Server Denial of Service
2011-12-09 00:00:00
seebug
seebug
Apache Range Header Denial Of Service
2011-12-09 00:00:00
Apache HTTP Server Denial of Service
2014-07-01 00:00:00
Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞
2011-08-26 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
2011-08-24 21:00:00
ubuntu
ubuntu
Apache vulnerability
2011-09-01 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability
2011-08-30 00:00:00
Advisory: Range header DoS vulnerability Apache HTTPD 1.3/2.x &#40;CVE-2011-3192&#41;
2011-08-27 00:00:00
Multiple HTTP servers DoS
2011-10-20 00:00:00
oraclelinux
oraclelinux
httpd security update
2011-08-31 00:00:00
httpd security and bug fix update
2011-10-20 00:00:00
metasploit
metasploit
Apache Range Header DoS (Apache Killer)
2011-09-23 16:38:35
slackware
slackware
[slackware-security] httpd
2011-09-09 14:05:46
[slackware-security] httpd
2011-10-14 23:59:50
attackerkb
attackerkb
CVE-2011-3192
2011-08-29 00:00:00
cve
cve
CVE-2014-5329
2023-09-08 03:15:07
CVE-2007-0086
2007-01-05 18:28:00
exploitdb
exploitdb
Apache - Denial of Service
2011-12-09 00:00:00
Apache - Remote Memory Exhaustion (Denial of Service)
2011-08-19 00:00:00
osv
osv
apache2 - denial of service
2011-09-05 00:00:00
apache2-2.4.23-4.1 on GA media
2024-06-15 00:00:00
jvn
jvn
JVN#23809730: GIGAPOD vulnerable to denial-of-service (DoS)
2014-10-16 00:00:00
nmap
nmap
http-vuln-cve2011-3192 NSE Script
2011-08-29 21:42:57
redhatcve
redhatcve
CVE-2007-0086
2015-10-30 10:07:49
cbl_mariner
cbl_mariner
CVE-2007-0086 affecting package httpd 2.4.46-3
2020-11-05 04:21:24
kaspersky
kaspersky
KLA10065 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2011
2011-10-18 00:00:00
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00
Oracle Critical Patch Update - July 2012
2012-07-17 00:00:00

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.3

Confidence

High

EPSS

0.963

Percentile

99.6%

JSON
Related for CVE-2011-3192
nessus41prion3openvas49cvelist3debiancve2ubuntucve1nvd3freebsd1cert1suse8hackerone3redhat10httpd2altlinux3packetstorm4exploitpack1ibm2debian5amazon1threatpost2fedora2veracode1f52centos2cisa1checkpoint_advisories2zdt3seebug3checkpoint_security1ubuntu1securityvulns10oraclelinux2metasploit1slackware2attackerkb1cve2exploitdb2osv2jvn1nmap1redhatcve1cbl_mariner1kaspersky1gentoo1oracle3