7.8 - CVE-2011-3192

Executive Summary

Informations
Name	CVE-2011-3192	First vendor Publication	2011-08-29
Vendor	Cve	Last vendor Modification	2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score	7.8	Attack Range	Network
Cvss Impact Score	6.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-400	Uncontrolled Resource Consumption ('Resource Exhaustion')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:14762

Oval ID:	oval:org.mitre.oval:def:14762
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02702 platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09 OR Criteria meets HP Security Bulletin HPSBUX02702 HP Release B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.02 AND hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.02 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.02 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP version is less than B.2.0.64.02 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.02 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.64.02

Definition Id: oval:org.mitre.oval:def:14824

Oval ID:	oval:org.mitre.oval:def:14824
Title:	HP-UX Apache Web Server, Remote Denial of Service (DoS)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxws22APACHE.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE version is less than B.2.2.15.09 AND hpuxws22APACHE.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.APACHE2 version is less than B.2.2.15.09 AND hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.09 AND hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP version is less than B.2.2.15.09 AND hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APACHE.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP version is less than B.2.2.15.09 AND hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.09 AND hpuxws22APCH32.PHP2 version is less than B.2.2.15.09 AND hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.09

Definition Id: oval:org.mitre.oval:def:15135

Oval ID:	oval:org.mitre.oval:def:15135
Title:	DSA-2298-2 apache2 -- denial of service
Description:	The apache2 Upgrade from DSA-2298-1 has caused a regression that prevented some video players from seeking in video files served by Apache HTTPD. This update fixes this bug. The text of the original advisory is reproduced for reference: Two issues have been found in the Apache HTTPD web server: CVE-2011-3192 A vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server. This vulnerability allows an attacker to cause Apache HTTPD to use an excessive amount of memory, causing a denial of service. CVE-2010-1452 A vulnerability has been found in mod_dav that allows an attacker to cause a daemon crash, causing a denial of service. This issue only affects the Debian 5.0 oldstable/lenny distribution. The regression has been fixed in the following packages: For the oldstable distribution, this problem has been fixed in version 2.2.9-10+lenny11. For the stable distribution, this problem has been fixed in version 2.2.16-6+squeeze3. For the testing distribution, this problem will be fixed in version 2.2.20-1. For the unstable distribution, this problem has been fixed in version 2.2.20-1. We recommend that you upgrade your apache2 packages. This update also contains updated apache2-mpm-itk packages which have been recompiled against the updated apache2 packages. The new version number
Family:	unix	Class:	patch
Reference(s):	DSA-2298-2 CVE-2010-1452 CVE-2011-3192	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny11 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.16-6+squeeze3

Definition Id: oval:org.mitre.oval:def:15145

Oval ID:	oval:org.mitre.oval:def:15145
Title:	DSA-2298-1 apache2 -- denial of service
Description:	Two issues have been found in the Apache HTTPD web server: CVE-2011-3192 A vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server. This vulnerability allows an attacker to cause Apache HTTPD to use an excessive amount of memory, causing a denial of service. CVE-2010-1452 A vulnerability has been found in mod_dav that allows an attacker to cause a daemon crash, causing a denial of service. This issue only affects the Debian 5.0 oldstable/lenny distribution. For the oldstable distribution, these problems have been fixed in version 2.2.9-10+lenny10. For the stable distribution, this problem has been fixed in version 2.2.16-6+squeeze2. For the testing distribution, this problem will be fixed soon. For the unstable distribution, this problem has been fixed in version 2.2.19-2. We recommend that you upgrade your apache2 packages. This update also contains updated apache2-mpm-itk packages which have been recompiled against the updated apache2 packages. The new version number
Family:	unix	Class:	patch
Reference(s):	DSA-2298-1 CVE-2010-1452 CVE-2011-3192	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny10 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.16-6+squeeze2

Definition Id: oval:org.mitre.oval:def:15347

Oval ID:	oval:org.mitre.oval:def:15347
Title:	USN-1199-1 -- Apache vulnerability
Description:	apache2: Apache HTTP server A remote attacker could send crafted input to Apache and cause it to crash.
Family:	unix	Class:	patch
Reference(s):	USN-1199-1 CVE-2011-3192	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 8.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	Apache
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.17-1ubuntu1.2 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND Packages section apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.21 AND apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.21 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.6 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND apache2.2-bin DPKG is earlier than 2.2.16-1ubuntu3.3

Definition Id: oval:org.mitre.oval:def:18827

Oval ID:	oval:org.mitre.oval:def:18827
Title:	Apache HTTP vulnerability 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 in VisualSVN Server (CVE-2011-3192)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-3192	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed Check the version of Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 in VisualSVN Server Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP Server version is greater than or equals to 1.3.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than or equals to 1.3.68 in VisualSVN Server AND Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP Server version is greater than or equals to 2.0.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than 2.0.65 in VisualSVN Server AND Check the version of Apache HTTP Server in VisualSVN Server Check if Apache HTTP version is greater than or equals to 2.2.0 in VisualSVN Server AND Check if Apache HTTP Server version is less than 2.2.20 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:22002

Oval ID:	oval:org.mitre.oval:def:22002
Title:	RHSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1245-01 CVE-2011-3192	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	httpd
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 AND Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

Definition Id: oval:org.mitre.oval:def:22855

Oval ID:	oval:org.mitre.oval:def:22855
Title:	DEPRECATED: ELSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1245-01 CVE-2011-3192	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

Definition Id: oval:org.mitre.oval:def:23476

Oval ID:	oval:org.mitre.oval:def:23476
Title:	ELSA-2011:1245: httpd security update (Important)
Description:	The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1245-01 CVE-2011-3192	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	httpd
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test httpd-devel is earlier than 0:2.2.3-53.el5_7.1 AND mod_ssl is earlier than 0:2.2.3-53.el5_7.1 AND httpd-manual is earlier than 0:2.2.3-53.el5_7.1 AND httpd is earlier than 0:2.2.3-53.el5_7.1 OR rpm test Oracle Linux 6.x AND rpm test httpd-devel is earlier than 0:2.2.15-9.el6_1.2 AND httpd-tools is earlier than 0:2.2.15-9.el6_1.2 AND httpd-manual is earlier than 0:2.2.15-9.el6_1.2 AND mod_ssl is earlier than 0:2.2.15-9.el6_1.2 AND httpd is earlier than 0:2.2.15-9.el6_1.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.7:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.5:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.3::windows::::: cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.2::windows::::: cpe:2.3:a:apache:http_server:2.2.19:::::::* cpe:2.3:a:apache:http_server:2.2.18:::::::* cpe:2.3:a:apache:http_server:2.2.17:::::::* cpe:2.3:a:apache:http_server:2.2.16:::::::* cpe:2.3:a:apache:http_server:2.2.15-60:::::::* cpe:2.3:a:apache:http_server:2.2.15:::::::* cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.2:::::::* cpe:2.3:a:apache:http_server:2.1.9:::::::* cpe:2.3:a:apache:http_server:2.1.8:::::::* cpe:2.3:a:apache:http_server:2.1.7:::::::* cpe:2.3:a:apache:http_server:2.1.6:::::::* cpe:2.3:a:apache:http_server:2.1.5:::::::* cpe:2.3:a:apache:http_server:2.1.4:::::::* cpe:2.3:a:apache:http_server:2.1.3:::::::* cpe:2.3:a:apache:http_server:2.1.2:::::::* cpe:2.3:a:apache:http_server:2.1.1:::::::* cpe:2.3:a:apache:http_server:2.1.0:::::::* cpe:2.3:a:apache:http_server:2.1:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.65:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.58::win32::::: cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.46::win32::::: cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.34:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.34:::::::* cpe:2.3:a:apache:http_server:2.0.33:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.31:::::::* cpe:2.3:a:apache:http_server:2.0.30:::::::* cpe:2.3:a:apache:http_server:2.0.29:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.27:::::::* cpe:2.3:a:apache:http_server:2.0.26:::::::* cpe:2.3:a:apache:http_server:2.0.25:::::::* cpe:2.3:a:apache:http_server:2.0.24:::::::* cpe:2.3:a:apache:http_server:2.0.23:::::::* cpe:2.3:a:apache:http_server:2.0.22:::::::* cpe:2.3:a:apache:http_server:2.0.21:::::::* cpe:2.3:a:apache:http_server:2.0.20:::::::* cpe:2.3:a:apache:http_server:2.0.19:::::::* cpe:2.3:a:apache:http_server:2.0.18:::::::* cpe:2.3:a:apache:http_server:2.0.17:::::::* cpe:2.3:a:apache:http_server:2.0.16:::::::* cpe:2.3:a:apache:http_server:2.0.15:::::::* cpe:2.3:a:apache:http_server:2.0.14:::::::* cpe:2.3:a:apache:http_server:2.0.13:::::::* cpe:2.3:a:apache:http_server:2.0.12:::::::* cpe:2.3:a:apache:http_server:2.0.11:::::::* cpe:2.3:a:apache:http_server:2.0.0:::::::* cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:2.0:alpha9:::::: cpe:2.3:a:apache:http_server:1.99:::::::* cpe:2.3:a:apache:http_server:1.4.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.9::win32::::: cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.7::dev::::: cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.6::win32::::: cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.40:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.26::win32::::: cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.25::win32::::: cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.24::win32::::: cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.23::win32::::: cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.22::win32::::: cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.20::win32::::: cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.19::win32::::: cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.18::win32::::: cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.17::win32::::: cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.16::win32::::: cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.15::win32::::: cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.14::win32::::: cpe:2.3:a:apache:http_server:1.3.14::mac_os::::: cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.13::win32::::: cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.12::win32::::: cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.11::win32::::: cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::* cpe:2.3:a:apache:http_server:1.2.9:::::::* cpe:2.3:a:apache:http_server:1.2.6:::::::* cpe:2.3:a:apache:http_server:1.2.5:::::::* cpe:2.3:a:apache:http_server:1.2.4:::::::* cpe:2.3:a:apache:http_server:1.2.0:::::::* cpe:2.3:a:apache:http_server:1.15.17:::::::* cpe:2.3:a:apache:http_server:1.1.1:::::::* cpe:2.3:a:apache:http_server:1.1:::::::* cpe:2.3:a:apache:http_server:1.0.5:::::::* cpe:2.3:a:apache:http_server:1.0.3:::::::* cpe:2.3:a:apache:http_server:1.0.2:::::::* cpe:2.3:a:apache:http_server:1.0:::::::* cpe:2.3:a:apache:http_server:0.8.14:::::::* cpe:2.3:a:apache:http_server:0.8.11:::::::* cpe:2.3:a:apache:http_server:::::::: cpe:2.3:a:apache:http_server:::win32:::::* cpe:2.3:a:apache:http_server:-:::::::*	185
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:11.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::-:::	4
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.4:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::*	2
Os	Suse Linux Enterprise Server cpe:2.3:o:suse:linux_enterprise_server:11:sp1::::-::* cpe:2.3:o:suse:linux_enterprise_server:11:sp1::::vmware::* cpe:2.3:o:suse:linux_enterprise_server:10:sp2:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp3:::-:::* cpe:2.3:o:suse:linux_enterprise_server:10:sp4:::-:::*	5
Os	Suse Linux Enterprise Software Development Kit cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp1:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp3:::::: cpe:2.3:o:suse:linux_enterprise_software_development_kit:10:sp4::::::	3

ExploitDB Exploits

id	Description
2011-12-09	Apache HTTP Server Denial of Service

OpenVAS Exploits

Date	Description
2012-09-10	Name : Slackware Advisory SSA:2011-252-01 httpd File : nvt/esoft_slk_ssa_2011_252_01.nasl
2012-09-10	Name : Slackware Advisory SSA:2011-284-01 httpd File : nvt/esoft_slk_ssa_2011_284_01.nasl
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-25 (apache) File : nvt/glsa_201206_25.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1245 centos4 x86_64 File : nvt/gb_CESA-2011_1245_httpd_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos4 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos4_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2011:1392 centos5 x86_64 File : nvt/gb_CESA-2011_1392_httpd_centos5_x86_64.nasl
2012-07-30	Name : CentOS Update for httpd CESA-2012:0128 centos6 File : nvt/gb_CESA-2012_0128_httpd_centos6.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2012:0128-01 File : nvt/gb_RHSA-2012_0128-01_httpd.nasl
2012-07-09	Name : RedHat Update for httpd RHSA-2011:1391-01 File : nvt/gb_RHSA-2011_1391-01_httpd.nasl
2012-04-02	Name : Fedora Update for httpd FEDORA-2011-12667 File : nvt/gb_fedora_2011_12667_httpd_fc16.nasl
2012-02-27	Name : RedHat Update for httpd RHSA-2012:0323-01 File : nvt/gb_RHSA-2012_0323-01_httpd.nasl
2011-11-11	Name : CentOS Update for httpd CESA-2011:1392 centos4 i386 File : nvt/gb_CESA-2011_1392_httpd_centos4_i386.nasl
2011-11-11	Name : Mandriva Update for apache MDVSA-2011:168 (apache) File : nvt/gb_mandriva_MDVSA_2011_168.nasl
2011-10-21	Name : CentOS Update for httpd CESA-2011:1392 centos5 i386 File : nvt/gb_CESA-2011_1392_httpd_centos5_i386.nasl
2011-10-21	Name : RedHat Update for httpd RHSA-2011:1392-01 File : nvt/gb_RHSA-2011_1392-01_httpd.nasl
2011-10-20	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006) File : nvt/gb_macosx_su11-006.nasl
2011-09-21	Name : Debian Security Advisory DSA 2298-1 (apache2) File : nvt/deb_2298_1.nasl
2011-09-21	Name : FreeBSD Ports: apache, apache-event, apache-itk, apache-peruser, apache-worker File : nvt/freebsd_apache18.nasl
2011-09-21	Name : Debian Security Advisory DSA 2298-2 (apache2) File : nvt/deb_2298_2.nasl
2011-09-16	Name : RedHat Update for httpd RHSA-2011:1294-01 File : nvt/gb_RHSA-2011_1294-01_httpd.nasl
2011-09-16	Name : Fedora Update for httpd FEDORA-2011-12715 File : nvt/gb_fedora_2011_12715_httpd_fc15.nasl
2011-09-07	Name : Mandriva Update for apache MDVSA-2011:130 (apache) File : nvt/gb_mandriva_MDVSA_2011_130.nasl
2011-09-07	Name : RedHat Update for httpd RHSA-2011:1245-01 File : nvt/gb_RHSA-2011_1245-01_httpd.nasl
2011-09-07	Name : Ubuntu Update for apache2 USN-1199-1 File : nvt/gb_ubuntu_USN_1199_1.nasl
2011-09-07	Name : CentOS Update for httpd CESA-2011:1245 centos4 i386 File : nvt/gb_CESA-2011_1245_httpd_centos4_i386.nasl
2011-08-26	Name : Apache httpd Web Server Range Header Denial of Service Vulnerability File : nvt/secpod_apache_http_srv_range_header_dos_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
74721	Apache HTTP Server ByteRange Filter Memory Exhaustion Remote DoS A denial of service vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server prior to version 2.2.20: http://seclists.org/fulldisclosure/2011/Aug/175 An attack tool is circulating in the wild. Active use of this tool has been observed. The attack can be done remotely and with a modest number of requests can cause very significant memory and CPU usage on the server. The default Apache httpd installations version 2.0 prior to 2.0.65 and version 2.2 prior to 2.2.20 are vulnerable. Apache 2.2.20 does fix this issue; however with a number of side effects (see release notes). Version 2.2.21 corrects a protocol defect in 2.2.20, and also introduces the MaxRanges directive. Version 2.0.65 includes fix for this vulnerability. Apache 1.3 is NOT vulnerable. However as explained in the background section in more detail - this attack does cause a significant and possibly unexpected load. You are advised to review your configuration in that light.

Description

74721

Apache HTTP Server ByteRange Filter Memory Exhaustion Remote DoS

A denial of service vulnerability has been found in the way the multiple overlapping ranges are handled by the Apache HTTPD server prior to version 2.2.20: http://seclists.org/fulldisclosure/2011/Aug/175 An attack tool is circulating in the wild. Active use of this tool has been observed. The attack can be done remotely and with a modest number of requests can cause very significant memory and CPU usage on the server. The default Apache httpd installations version 2.0 prior to 2.0.65 and version 2.2 prior to 2.2.20 are vulnerable. Apache 2.2.20 does fix this issue; however with a number of side effects (see release notes). Version 2.2.21 corrects a protocol defect in 2.2.20, and also introduces the MaxRanges directive. Version 2.0.65 includes fix for this vulnerability. Apache 1.3 is NOT vulnerable. However as explained in the background section in more detail - this attack does cause a significant and possibly unexpected load. You are advised to review your configuration in that light.

Snort® IPS/IDS

Date	Description
2014-01-10	Apache Killer denial of service tool exploit attempt RuleID : 19825 - Revision : 13 - Type : SERVER-APACHE

Nessus® Vulnerability Scanner

Date	Description
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0542.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-9.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-1.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL13114.nasl - Type : ACT_GATHER_INFO
2014-08-22	Name : The remote host is affected by multiple vulnerabilities. File : juniper_nsm_jsa10642.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_apache2-110831.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-111026.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_apache2-110831.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-01.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2011-09.nasl - Type : ACT_GATHER_INFO
2013-07-16	Name : The remote web server is affected by several vulnerabilities. File : apache_2_0_65.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1294.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20111020_httpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20110831_httpd_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-25.nasl - Type : ACT_GATHER_INFO
2012-04-20	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_7_0_0_24.nasl - Type : ACT_GATHER_INFO
2012-02-22	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0323.nasl - Type : ACT_GATHER_INFO
2012-02-16	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-02-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0128.nasl - Type : ACT_GATHER_INFO
2012-01-19	Name : The remote application server is affected by multiple vulnerabilities. File : websphere_6_1_0_41.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7722.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-110831.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_apache2-111026.nasl - Type : ACT_GATHER_INFO
2011-11-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-168.nasl - Type : ACT_GATHER_INFO
2011-10-24	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_apache2-7721.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1391.nasl - Type : ACT_GATHER_INFO
2011-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1392.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_SecUpd2011-006.nasl - Type : ACT_GATHER_INFO
2011-10-13	Name : The remote host is missing a Mac OS X update that fixes several security issues. File : macosx_10_7_2.nasl - Type : ACT_GATHER_INFO
2011-10-03	Name : The remote Fedora host is missing a security update. File : fedora_2011-12667.nasl - Type : ACT_GATHER_INFO
2011-09-30	Name : The remote application server may be affected by multiple vulnerabilities. File : websphere_8_0_0_1.nasl - Type : ACT_GATHER_INFO
2011-09-16	Name : The remote Fedora host is missing a security update. File : fedora_2011-12715.nasl - Type : ACT_GATHER_INFO
2011-09-12	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2011-252-01.nasl - Type : ACT_GATHER_INFO
2011-09-06	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2011-130.nasl - Type : ACT_GATHER_INFO
2011-09-02	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1199-1.nasl - Type : ACT_GATHER_INFO
2011-09-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2011-09-01	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1245.nasl - Type : ACT_GATHER_INFO
2011-08-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_7f6108d2cea811e09d580800279895ea.nasl - Type : ACT_GATHER_INFO
2011-08-30	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2298.nasl - Type : ACT_GATHER_INFO
2011-08-25	Name : The web server running on the remote host is affected by a denial of service ... File : apache_range_dos.nasl - Type : ACT_ATTACK

Sources (Detail)

Source	Url

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-11-28 23:04:20	Multiple Updates
2024-11-28 12:26:54	Multiple Updates
2024-08-02 12:17:27	Multiple Updates
2024-08-02 01:05:07	Multiple Updates
2024-02-02 01:16:57	Multiple Updates
2024-02-01 12:04:59	Multiple Updates
2023-11-07 21:47:18	Multiple Updates
2023-09-05 12:15:54	Multiple Updates
2023-09-05 01:04:52	Multiple Updates
2023-09-02 12:16:00	Multiple Updates
2023-09-02 01:04:57	Multiple Updates
2023-08-12 12:19:20	Multiple Updates
2023-08-12 01:04:58	Multiple Updates
2023-08-11 12:16:05	Multiple Updates
2023-08-11 01:05:07	Multiple Updates
2023-08-06 12:15:27	Multiple Updates
2023-08-06 01:04:58	Multiple Updates
2023-08-04 12:15:31	Multiple Updates
2023-08-04 01:04:58	Multiple Updates
2023-07-14 12:15:31	Multiple Updates
2023-07-14 01:04:56	Multiple Updates
2023-03-29 01:17:24	Multiple Updates
2023-03-28 12:05:03	Multiple Updates
2022-10-11 12:13:51	Multiple Updates
2022-10-11 01:04:41	Multiple Updates
2022-09-20 02:12:58	Multiple Updates
2021-06-16 12:10:22	Multiple Updates
2021-06-12 09:23:00	Multiple Updates
2021-06-06 17:23:02	Multiple Updates
2021-06-03 13:23:13	Multiple Updates
2021-05-04 12:17:29	Multiple Updates
2021-04-22 01:20:49	Multiple Updates
2021-03-30 17:22:48	Multiple Updates
2020-05-23 13:16:58	Multiple Updates
2020-05-23 01:46:32	Multiple Updates
2020-05-23 00:30:58	Multiple Updates
2019-08-21 12:01:27	Multiple Updates
2019-03-19 12:04:33	Multiple Updates
2018-12-01 00:18:56	Multiple Updates
2017-09-19 09:24:54	Multiple Updates
2017-08-29 09:23:30	Multiple Updates
2016-08-23 09:24:43	Multiple Updates
2016-07-28 01:01:38	Multiple Updates
2016-06-28 18:48:09	Multiple Updates
2016-04-26 21:01:56	Multiple Updates
2016-03-12 00:25:00	Multiple Updates
2016-03-11 21:26:12	Multiple Updates
2014-11-08 13:29:49	Multiple Updates
2014-10-12 13:26:45	Multiple Updates
2014-10-11 13:26:07	Multiple Updates
2014-08-23 13:27:36	Multiple Updates
2014-06-14 13:31:30	Multiple Updates
2014-02-17 11:04:45	Multiple Updates
2014-01-19 21:28:06	Multiple Updates
2013-11-20 17:19:07	Multiple Updates
2013-11-18 13:19:03	Multiple Updates
2013-11-15 13:20:03	Multiple Updates
2013-11-06 21:21:52	Multiple Updates
2013-11-06 13:23:55	Multiple Updates
2013-11-04 21:21:46	Multiple Updates
2013-10-11 13:23:09	Multiple Updates
2013-05-10 23:06:16	Multiple Updates
2012-11-07 05:20:38	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	9
CPE ID(s)	199
Sources(s)	78
osvdb(s)	1
ExploitDB Exploit(s)	1
Openvas Exploit(s)	26
Snort® Rule(s)	1
Nessus® Exploit(s)	48

	Related
10	MDVSA-2013:150
10	HPSBMU02764 SSR...
7.8	VU#405811
7.8	USN-1199-1
7.8	RHSA-2011:1392
7.8	RHSA-2011:1391
7.8	RHSA-2011:1369
7.8	RHSA-2011:1300
7.8	RHSA-2011:1294
7.8	RHSA-2011:1245
7.8	MDVSA-2011:168
7.8	MDVSA-2011:130-1
7.8	MDVSA-2011:130
7.8	HPSBUX02707 SSR...
7.8	HPSBUX02702 SSR...
7.8	HPSBOV02822 SSR...
7.8	HPSBMU02776 SSR...
7.8	HPSBMU02766 SSR...
7.8	HPSBMU02704 SSR...
7.8	GLSA-201206-25
7.8	DSA-2298
7.8	cisco-sa-201108...
7.5	CVE-2021-31618
5.5	CVE-2020-13938
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 24 more Alert(s)