Red Hat Security AdvisoryRHSA-2011:1245
httpd security update
Released 2011-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) httpd-2.2.3-53.el5_7.1, httpd-devel-2.2.3-53.el5_7.1, httpd-devel-2.2.3-53.el5_7.1.i386 +2
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-53.el5_7.1, httpd-2.2.3-53.el5_7.1.i386, httpd-2.2.3-53.el5_7.1.ia64 +13
- Red Hat Enterprise Linux AS version 4 httpd-2.0.52-48.ent, httpd-2.0.52-48.ent.i386, httpd-2.0.52-48.ent.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-53.el5_7.1, httpd-2.2.3-53.el5_7.1.i386, mod_ssl-1:2.2.3-53.el5_7.1 +1
- Red Hat Enterprise Linux Desktop version 4 httpd-2.0.52-48.ent, httpd-2.0.52-48.ent.i386, httpd-devel-2.0.52-48.ent +7
- Red Hat Enterprise Linux ES version 4 httpd-2.0.52-48.ent, httpd-2.0.52-48.ent.i386, httpd-2.0.52-48.ent.ia64 +12
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-9.el6_1.2, httpd-devel-2.2.15-9.el6_1.2, httpd-devel-2.2.15-9.el6_1.2.ppc +3
- Red Hat Enterprise Linux WS version 4 httpd-2.0.52-48.ent, httpd-2.0.52-48.ent.i386, httpd-2.0.52-48.ent.ia64 +12
Fixes 1 record
Priority HIGH 79
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses mul…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.98945 · Published 2011-08-29 · Partial fix CWE-400
