CVE-2011-3348
Fixed in a distro release EPSS 22%
The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
Products: apache http_server, redhat jboss_enterprise_web_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | apache2 | 2.2.21-1 |
| Debian 13 | apache2 | 2.2.21-1 |
| Debian 14 | apache2 | 2.2.21-1 |
| Red Hat Enterprise Linux 6 | httpd | 0:2.2.15-9.el6_1.3 |
| Red Hat Enterprise Linux 6 | httpd-debuginfo | 0:2.2.15-9.el6_1.3 |
| Red Hat Enterprise Linux 6 | httpd-devel | 0:2.2.15-9.el6_1.3 |
| Red Hat Enterprise Linux 6 | httpd-manual | 0:2.2.15-9.el6_1.3 |
| Red Hat Enterprise Linux 6 | httpd-tools | 0:2.2.15-9.el6_1.3 |
| Red Hat Enterprise Linux 6 | mod_ssl | 1:2.2.15-9.el6_1.3 |
| Red Hat jboss enterprise web server 1 | httpd | 0:2.2.17-15.4.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd | 0:2.2.17-15.4.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd-devel | 0:2.2.17-15.4.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd-devel | 0:2.2.17-15.4.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd-manual | 0:2.2.17-15.4.ep5.el5 |
| Red Hat jboss enterprise web server 1 | httpd-manual | 0:2.2.17-15.4.ep5.el6 |
| Red Hat jboss enterprise web server 1 | httpd-tools | 0:2.2.17-15.4.ep5.el6 |
| Red Hat jboss enterprise web server 1 | mod_ssl | 1:2.2.17-15.4.ep5.el5 |
| Red Hat jboss enterprise web server 1 | mod_ssl | 1:2.2.17-15.4.ep5.el6 |