NetSight
IP …
high7.8Public exploit code

CVE-2011-3192

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memo…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Affected products

VendorProductAffected versions
ApacheHttp Server
from 2.0.35 before 2.0.65
from 2.2.0 before 2.2.20
OpensuseOpensuse
Versions 11.3, 11.4
SuseLinux Enterprise Server
Versions 10, 11
SuseLinux Enterprise Software Development Kit
Versions 10, 11
CanonicalUbuntu Linux
Versions 8.04, 10.04, 10.10, 11.04

Weakness classification

CWE-400

References