Red Hat Security AdvisoryRHSA-2011:1294
httpd security update
Released 2011-09-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5.6.z server) httpd-2.2.3-45.el5_6.2, httpd-2.2.3-45.el5_6.2.i386, httpd-2.2.3-45.el5_6.2.ia64 +13
- Red Hat Enterprise Linux Long Life (v. 5.3 server) httpd-2.2.3-22.el5_3.3, httpd-2.2.3-22.el5_3.3.i386, httpd-2.2.3-22.el5_3.3.ia64 +9
- Red Hat Enterprise Linux Server EUS (v. 6.0) httpd-2.2.15-5.el6_0.1, httpd-devel-2.2.15-5.el6_0.1, httpd-devel-2.2.15-5.el6_0.1.ppc +3
Fixes 1 record
Priority HIGH 79
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses mul…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.98945 · Published 2011-08-29 · Partial fix CWE-400
