CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3192

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.928

EPSS Ranking 99.7%

CVSS Severity

CVSS v2 Score 7.8

References

Products affected by CVE-2011-3192

Apache » Http Server » Version: 2.0.35

cpe:2.3:a:apache:http_server:2.0.35
Apache » Http Server » Version: 2.0.36

cpe:2.3:a:apache:http_server:2.0.36
Apache » Http Server » Version: 2.0.37

cpe:2.3:a:apache:http_server:2.0.37
Apache » Http Server » Version: 2.0.38

cpe:2.3:a:apache:http_server:2.0.38
Apache » Http Server » Version: 2.0.39

cpe:2.3:a:apache:http_server:2.0.39
Apache » Http Server » Version: 2.0.40

cpe:2.3:a:apache:http_server:2.0.40
Apache » Http Server » Version: 2.0.41

cpe:2.3:a:apache:http_server:2.0.41
Apache » Http Server » Version: 2.0.42

cpe:2.3:a:apache:http_server:2.0.42
Apache » Http Server » Version: 2.0.43

cpe:2.3:a:apache:http_server:2.0.43
Apache » Http Server » Version: 2.0.44

cpe:2.3:a:apache:http_server:2.0.44
Apache » Http Server » Version: 2.0.45

cpe:2.3:a:apache:http_server:2.0.45
Apache » Http Server » Version: 2.0.46

cpe:2.3:a:apache:http_server:2.0.46
Apache » Http Server » Version: 2.0.47

cpe:2.3:a:apache:http_server:2.0.47
Apache » Http Server » Version: 2.0.48

cpe:2.3:a:apache:http_server:2.0.48
Apache » Http Server » Version: 2.0.49

cpe:2.3:a:apache:http_server:2.0.49
Apache » Http Server » Version: 2.0.50

cpe:2.3:a:apache:http_server:2.0.50
Apache » Http Server » Version: 2.0.51

cpe:2.3:a:apache:http_server:2.0.51
Apache » Http Server » Version: 2.0.52

cpe:2.3:a:apache:http_server:2.0.52
Apache » Http Server » Version: 2.0.53

cpe:2.3:a:apache:http_server:2.0.53
Apache » Http Server » Version: 2.0.54

cpe:2.3:a:apache:http_server:2.0.54
Apache » Http Server » Version: 2.0.55

cpe:2.3:a:apache:http_server:2.0.55
Apache » Http Server » Version: 2.0.56

cpe:2.3:a:apache:http_server:2.0.56
Apache » Http Server » Version: 2.0.57

cpe:2.3:a:apache:http_server:2.0.57
Apache » Http Server » Version: 2.0.58

cpe:2.3:a:apache:http_server:2.0.58
Apache » Http Server » Version: 2.0.59

cpe:2.3:a:apache:http_server:2.0.59
Apache » Http Server » Version: 2.0.60

cpe:2.3:a:apache:http_server:2.0.60
Apache » Http Server » Version: 2.0.61

cpe:2.3:a:apache:http_server:2.0.61
Apache » Http Server » Version: 2.0.62

cpe:2.3:a:apache:http_server:2.0.62
Apache » Http Server » Version: 2.0.63

cpe:2.3:a:apache:http_server:2.0.63
Apache » Http Server » Version: 2.0.64

cpe:2.3:a:apache:http_server:2.0.64
Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.10

cpe:2.3:a:apache:http_server:2.2.10
Apache » Http Server » Version: 2.2.11

cpe:2.3:a:apache:http_server:2.2.11
Apache » Http Server » Version: 2.2.12

cpe:2.3:a:apache:http_server:2.2.12
Apache » Http Server » Version: 2.2.13

cpe:2.3:a:apache:http_server:2.2.13
Apache » Http Server » Version: 2.2.14

cpe:2.3:a:apache:http_server:2.2.14
Apache » Http Server » Version: 2.2.15

cpe:2.3:a:apache:http_server:2.2.15
Apache » Http Server » Version: 2.2.15-60

cpe:2.3:a:apache:http_server:2.2.15-60
Apache » Http Server » Version: 2.2.16

cpe:2.3:a:apache:http_server:2.2.16
Apache » Http Server » Version: 2.2.17

cpe:2.3:a:apache:http_server:2.2.17
Apache » Http Server » Version: 2.2.18

cpe:2.3:a:apache:http_server:2.2.18
Apache » Http Server » Version: 2.2.19

cpe:2.3:a:apache:http_server:2.2.19
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4
Apache » Http Server » Version: 2.2.5

cpe:2.3:a:apache:http_server:2.2.5
Apache » Http Server » Version: 2.2.6

cpe:2.3:a:apache:http_server:2.2.6
Apache » Http Server » Version: 2.2.7

cpe:2.3:a:apache:http_server:2.2.7
Apache » Http Server » Version: 2.2.8

cpe:2.3:a:apache:http_server:2.2.8
Apache » Http Server » Version: 2.2.9

cpe:2.3:a:apache:http_server:2.2.9
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 10.10

cpe:2.3:o:canonical:ubuntu_linux:10.10
Canonical » Ubuntu Linux » Version: 11.04

cpe:2.3:o:canonical:ubuntu_linux:11.04
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Opensuse » Opensuse » Version: 11.3

cpe:2.3:o:opensuse:opensuse:11.3
Opensuse » Opensuse » Version: 11.4

cpe:2.3:o:opensuse:opensuse:11.4
Suse » Linux Enterprise Server » Version: 10

cpe:2.3:o:suse:linux_enterprise_server:10
Suse » Linux Enterprise Server » Version: 11

cpe:2.3:o:suse:linux_enterprise_server:11
Suse » Linux Enterprise Software Development Kit » Version: 10

cpe:2.3:o:suse:linux_enterprise_software_development_kit:10
Suse » Linux Enterprise Software Development Kit » Version: 11

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3192

Products

Pricing

Contact Us