Red Hat Security AdvisoryRHSA-2011:0844
apr security update
Released 2011-05-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) apr-1.2.7-11.el5_6.5, apr-1.2.7-11.el5_6.5.i386, apr-1.2.7-11.el5_6.5.ia64 +9
- Red Hat Enterprise Linux AS version 4 apr-0.9.4-26.el4, apr-0.9.4-26.el4.i386, apr-0.9.4-26.el4.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) apr-1.2.7-11.el5_6.5, apr-1.2.7-11.el5_6.5.i386, apr-docs-1.2.7-11.el5_6.5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) apr-1.2.7-11.el5_6.5, apr-devel-1.2.7-11.el5_6.5, apr-devel-1.2.7-11.el5_6.5.i386
- Red Hat Enterprise Linux Desktop version 4 apr-0.9.4-26.el4, apr-0.9.4-26.el4.i386, apr-devel-0.9.4-26.el4 +1
- Red Hat Enterprise Linux ES version 4 apr-0.9.4-26.el4, apr-0.9.4-26.el4.i386, apr-0.9.4-26.el4.ia64 +3
- Red Hat Enterprise Linux Server (v. 6) apr-1.3.9-3.el6_1.2, apr-1.3.9-3.el6_1.2.ppc, apr-devel-1.3.9-3.el6_1.2 +1
- Red Hat Enterprise Linux WS version 4 apr-0.9.4-26.el4, apr-0.9.4-26.el4.i386, apr-0.9.4-26.el4.ia64 +3
Fixes 1 record
Priority LOW 33
The fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library 1.4.3 and 1.4.4, and the Apache HTTP Server 2.2.18, allows remote attackers to cause a denial of service (infinite loop) via a URI…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10322 · Published 2011-05-24 · Fixed CWE-399
