apache2: denial of service [LWN.net]

Package(s):

apache2

CVE #(s):

CVE-2011-3192

Created:

August 30, 2011

Updated:

October 14, 2011

Description:

From the Debian advisory:

A vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server. This vulnerability allows an attacker to cause Apache HTTPD to use an excessive amount of memory, causing a denial of service.

Alerts:

openSUSE	openSUSE-SU-2011:1217-1	2011-11-04
SUSE	SUSE-SU-2011:1215-1	2011-11-04
SUSE	SUSE-SU-2011:1216-1	2011-11-04
SUSE	SUSE-SU-2011:1229-1	2011-11-09
Scientific Linux	SL-http-20111020	2011-10-20
Scientific Linux	SL-http-20111020	2011-10-20
Red Hat	RHSA-2011:1369-01	2011-10-13
Mandriva	MDVSA-2011:130-1	2011-09-17
Fedora	FEDORA-2011-12715	2011-09-14
Red Hat	RHSA-2011:1300-01	2011-09-15
Red Hat	RHSA-2011:1294-01	2011-09-14
Slackware	SSA:2011-252-01	2011-09-09
SUSE	SUSE-SU-2011:1010-1	2011-09-06
SUSE	SUSE-SU-2011:1007-1	2011-09-06
SUSE	SUSE-SU-2011:1000-1	2011-09-06
Mandriva	MDVSA-2011:130	2011-09-04
Debian	DSA-2298-2	2011-09-05
openSUSE	openSUSE-SU-2011:0993-1	2011-09-02
CentOS	CESA-2011:1245	2011-09-01
Ubuntu	USN-1199-1	2011-09-01
Scientific Linux	SL-http-20110831	2011-08-31
Red Hat	RHSA-2011:1245-01	2011-08-31
Debian	DSA-2298-1	2011-08-29
Gentoo	201206-25	2012-06-24

(Log in to post comments)