CVE-2011-3192
Fixed in a distro release EPSS 99%
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Products: apache http_server, opensuse, suse linux_enterprise_server, suse linux_enterprise_software_development_kit, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.2.19-2 |
| Debian 13 | apache2 | 2.2.19-2 |
| Debian 14 | apache2 | 2.2.19-2 |
| Debian 5.0 | apache2 | 2.2.9-10+lenny10 |
| Debian 6.0 | apache2 | 2.2.16-6+squeeze2 |
| Red Hat Enterprise Linux 4 | httpd | 0:2.0.52-48.ent |
| Red Hat Enterprise Linux 4 | httpd-debuginfo | 0:2.0.52-48.ent |
| Red Hat Enterprise Linux 4 | httpd-devel | 0:2.0.52-48.ent |
| Red Hat Enterprise Linux 4 | httpd-manual | 0:2.0.52-48.ent |
| Red Hat Enterprise Linux 4 | httpd-suexec | 0:2.0.52-48.ent |
| Red Hat Enterprise Linux 4 | mod_ssl | 1:2.0.52-48.ent |
| Red Hat Enterprise Linux 5 | httpd | 0:2.2.3-53.el5_7.1 |
| Red Hat Enterprise Linux 5 | httpd | 0:2.2.3-45.el5_6.2 |
| Red Hat Enterprise Linux 5 | httpd-debuginfo | 0:2.2.3-53.el5_7.1 |
| Red Hat Enterprise Linux 5 | httpd-debuginfo | 0:2.2.3-45.el5_6.2 |
| Red Hat Enterprise Linux 5 | httpd-devel | 0:2.2.3-53.el5_7.1 |
| Red Hat Enterprise Linux 5 | httpd-devel | 0:2.2.3-45.el5_6.2 |
| Red Hat Enterprise Linux 5 | httpd-manual | 0:2.2.3-53.el5_7.1 |
| Red Hat Enterprise Linux 5 | httpd-manual | 0:2.2.3-45.el5_6.2 |
| Red Hat Enterprise Linux 5 | mod_ssl | 1:2.2.3-45.el5_6.2 |
| Red Hat Enterprise Linux 5 | mod_ssl | 1:2.2.3-53.el5_7.1 |
| Red Hat Enterprise Linux 6 | httpd | 0:2.2.15-9.el6_1.2 |
| Red Hat Enterprise Linux 6 | httpd-debuginfo | 0:2.2.15-9.el6_1.2 |
| Red Hat Enterprise Linux 6 | httpd-devel | 0:2.2.15-9.el6_1.2 |
| Red Hat Enterprise Linux 6 | httpd-manual | 0:2.2.15-9.el6_1.2 |
| Red Hat Enterprise Linux 6 | httpd-tools | 0:2.2.15-9.el6_1.2 |
| Red Hat Enterprise Linux 6 | mod_ssl | 1:2.2.15-9.el6_1.2 |
| Red Hat jboss enterprise web server 1 | httpd | 0:2.2.17-13.2.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd | 0:2.2.17-14.1.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd-devel | 0:2.2.17-13.2.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd-devel | 0:2.2.17-14.1.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd-manual | 0:2.2.17-14.1.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd-manual | 0:2.2.17-13.2.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd-tools | 0:2.2.17-13.2.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd22 | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-apr | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-apr-devel | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-apr-util | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-apr-util-devel | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-debuginfo | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-devel | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | httpd22-manual | 0:2.2.17-16.ep5.el4 |
| Red Hat jboss enterprise web server 1 | mod_ssl | 1:2.2.17-13.2.ep5.el6 |
| Red Hat jboss enterprise web server 1 | mod_ssl | 1:2.2.17-14.1.ep5.el5 |
| Red Hat jboss enterprise web server 1 | mod_ssl22 | 1:2.2.17-16.ep5.el4 |
| Red Hat rhel application stack 2 | httpd | 0:2.2.13-3.el5s2 |
| Red Hat rhel application stack 2 | httpd-debuginfo | 0:2.2.13-3.el5s2 |
| Red Hat rhel application stack 2 | httpd-devel | 0:2.2.13-3.el5s2 |
| Red Hat rhel application stack 2 | httpd-manual | 0:2.2.13-3.el5s2 |
| Red Hat rhel application stack 2 | mod_ssl | 1:2.2.13-3.el5s2 |
| Red Hat rhel els 3 | httpd | 0:2.0.46-78.ent |
| Red Hat rhel els 3 | httpd-debuginfo | 0:2.0.46-78.ent |
| Red Hat rhel els 3 | httpd-devel | 0:2.0.46-78.ent |
| Red Hat rhel els 3 | mod_ssl | 1:2.0.46-78.ent |
| Red Hat rhel eus 6.0 | httpd | 0:2.2.15-5.el6_0.1 |
| Red Hat rhel eus 6.0 | httpd-debuginfo | 0:2.2.15-5.el6_0.1 |
| Red Hat rhel eus 6.0 | httpd-devel | 0:2.2.15-5.el6_0.1 |
| Red Hat rhel eus 6.0 | httpd-manual | 0:2.2.15-5.el6_0.1 |
| Red Hat rhel eus 6.0 | httpd-tools | 0:2.2.15-5.el6_0.1 |
| Red Hat rhel eus 6.0 | mod_ssl | 1:2.2.15-5.el6_0.1 |
| Red Hat rhel mission critical 5.3 | httpd | 0:2.2.3-22.el5_3.3 |
| Red Hat rhel mission critical 5.3 | httpd-debuginfo | 0:2.2.3-22.el5_3.3 |
| Red Hat rhel mission critical 5.3 | httpd-devel | 0:2.2.3-22.el5_3.3 |
| Red Hat rhel mission critical 5.3 | httpd-manual | 0:2.2.3-22.el5_3.3 |
| Red Hat rhel mission critical 5.3 | mod_ssl | 1:2.2.3-22.el5_3.3 |
| openSUSE Tumbleweed | apache2 | 2.4.23-4.1 |