Red Hat Security AdvisoryRHSA-2011:1329
httpd and httpd22 security update
Released 2011-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Web Server 1 for RHEL 5 Server httpd-2.2.17-14.1.ep5.el5, httpd-2.2.17-14.1.ep5.el5.i386, httpd-devel-2.2.17-14.1.ep5.el5 +5
- Red Hat JBoss Enterprise Web Server 1 for RHEL 6 Server httpd-2.2.17-13.2.ep5.el6, httpd-2.2.17-13.2.ep5.el6.i386, httpd-devel-2.2.17-13.2.ep5.el6 +7
- Red Hat JBoss Web Server 1.0 for RHEL 4 AS httpd22-2.2.17-16.ep5.el4, httpd22-2.2.17-16.ep5.el4.i386, httpd22-apr-2.2.17-16.ep5.el4 +13
- Red Hat JBoss Web Server 1.0 for RHEL 4 ES httpd22-2.2.17-16.ep5.el4, httpd22-2.2.17-16.ep5.el4.i386, httpd22-apr-2.2.17-16.ep5.el4 +13
Fixes 1 record
Priority HIGH 79
The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses mul…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.98945 · Published 2011-08-29 · Partial fix CWE-400
