Lucene search
F5F5:K13114HistorySep 12, 2013 - 12:00 a.m.
K13114 : Apache Range header vulnerability - CVE-2011-3192
2013-09-1200:00:00
my.f5.com
221
Security Advisory Description
The byte-range filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial-of-service (memory and CPU consumption) using a** Range** header that expresses multiple overlapping ranges.
When this vulnerability is exploited, the httpd process consumes all available CPU cycles. As a result of CPU starvation, the Configuration utility, SSH sessions, and other userland processes may appear extremely slow or completely unresponsive. On BIG-IP systems, if the system hardware watchdog timer is not updated for more than 10 seconds, the hardware watchdog restarts the system.
Impact
The performance of userland processes may be severely impaired, and the system may eventually reboot.
Related
freebsd
freebsd
apache -- Range header DoS vulnerability
2011-08-24 00:00:00
suse
suse
apache2: Fixed a remote denial of service via byte-ranges (important)
2011-09-02 18:08:23
Security update for Apache (important)
2011-09-06 18:08:19
Security update for Apache (important)
2011-09-06 10:08:12
openvas
openvas
Slackware: Security Advisory (SSA:2011-252-01)
2012-09-10 00:00:00
RedHat Update for httpd RHSA-2011:1294-01
2011-09-16 00:00:00
CentOS Update for httpd CESA-2011:1245 centos4 i386
2011-09-07 00:00:00
httpd
httpd
Apache Httpd < 2.2.20 : Range header remote DoS
2011-08-20 00:00:00
Apache Httpd < 2.0.65 : Range header remote DoS
2011-08-20 00:00:00
ibm
ibm
packetstorm
packetstorm
Obehotel CMS Denial Of Service / SQL Injection
2013-08-26 00:00:00
Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS
2013-10-07 00:00:00
ProtonMail.ch Header Injection / CSRF
2014-05-30 00:00:00
cert
cert
Apache HTTPD 1.3/2.x Range header DoS vulnerability
2011-08-26 00:00:00
redhat
redhat
(RHSA-2011:1369) Important: httpd security update
2011-10-13 00:00:00
(RHSA-2011:1245) Important: httpd security update
2011-08-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
hackerone
hackerone
ownCloud: Apache Range Header Denial of Service Attack (Confirmed PoC)
2015-09-14 22:55:12
Gratipay: grtp.co is vulnerable to http-vuln-cve2011-3192
2016-01-25 13:01:41
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
exploitpack
exploitpack
Apache - Denial of Service
2011-12-09 00:00:00
debian
debian
[BSA-049] Security Update for apache2
2011-09-06 02:06:51
[SECURITY] [DSA 2298-2] apache2 regression fix
2011-09-05 19:20:44
[SECURITY] [DSA 2298-1] apache2 security update
2011-08-29 21:16:25
nessus
nessus
RHEL 5 : httpd (RHSA-2011:1294)
2013-01-24 00:00:00
Amazon Linux AMI : httpd (ALAS-2011-1)
2014-10-12 00:00:00
RHEL 4 / 5 / 6 : httpd (RHSA-2011:1245)
2011-09-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:02:22
fedora
fedora
[SECURITY] Fedora 16 Update: httpd-2.2.21-1.fc16
2011-09-30 19:07:35
[SECURITY] Fedora 15 Update: httpd-2.2.21-1.fc15
2011-09-16 01:58:28
threatpost
threatpost
Apache Fixes Range Header DoS Flaw
2011-08-31 10:30:00
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
amazon
amazon
Medium: httpd
2011-09-27 22:46:00
checkpoint_security
checkpoint_security
checkpoint_advisories
checkpoint_advisories
Apache HTTPD Ranges Header Field Denial of Service (CVE-2011-3192)
2011-09-14 00:00:00
Apache HTTPD Ranges Header Field Denial of Service - ver 2 (CVE-2011-3192)
2010-02-25 00:00:00
seebug
seebug
Apache Range Header Denial Of Service
2011-12-09 00:00:00
Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞
2011-08-26 00:00:00
Apache HTTP Server Denial of Service
2014-07-01 00:00:00
zdt
zdt
Obehotel CMS SQL Injection Vulnerability
2013-08-27 00:00:00
cisa
cisa
Oracle Releases Security Alert for Oracle HTTP Server Products
2011-09-19 00:00:00
centos
centos
httpd, mod_ssl security update
2011-09-01 11:41:08
httpd, mod_ssl security update
2011-10-20 21:19:56
f5
f5
SOL13114 - Apache Range header vulnerability - CVE-2011-3192
2011-10-06 00:00:00
slackware
slackware
[slackware-security] httpd
2011-09-09 14:05:46
[slackware-security] httpd
2011-10-14 23:59:50
securityvulns
securityvulns
Advisory: Range header DoS vulnerability Apache HTTPD 1.3/2.x (CVE-2011-3192)
2011-08-27 00:00:00
Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability
2011-08-30 00:00:00
Multiple HTTP servers DoS
2011-10-20 00:00:00
ubuntu
ubuntu
Apache vulnerability
2011-09-01 00:00:00
oraclelinux
oraclelinux
httpd security update
2011-08-31 00:00:00
httpd security and bug fix update
2011-10-20 00:00:00
debiancve
debiancve
CVE-2011-3192
2011-08-29 15:55:02
cvelist
cvelist
CVE-2011-3192
2011-08-29 15:00:00
CVE-2014-5329
2023-09-08 02:52:41
cve
cve
CVE-2011-3192
2011-08-29 15:55:02
CVE-2014-5329
2023-09-08 03:15:07
prion
prion
Race condition
2023-09-08 03:15:00
Code injection
2011-08-29 15:55:00
osv
osv
apache2 - denial of service
2011-09-05 00:00:00
jvn
jvn
JVN#23809730: GIGAPOD vulnerable to denial-of-service (DoS)
2014-10-16 00:00:00
nvd
nvd
CVE-2011-3192
2011-08-29 15:55:02
CVE-2014-5329
2023-09-08 03:15:07
ubuntucve
ubuntucve
CVE-2011-3192
2011-08-29 00:00:00
exploitdb
exploitdb
Apache - Denial of Service
2011-12-09 00:00:00
nmap
nmap
http-vuln-cve2011-3192 NSE Script
2011-08-29 21:42:57
attackerkb
attackerkb
CVE-2011-3192
2011-08-29 00:00:00
kaspersky
kaspersky
KLA10065 Multiple vulnerabilities in Apache httpd
2013-07-22 00:00:00
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2011
2011-10-18 00:00:00
Oracle Critical Patch Update - January 2012
2012-01-17 00:00:00
Oracle Critical Patch Update - July 2012
2012-07-17 00:00:00