Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:45676F06-FBF8-4155-821C-4F98DA984BDA
HistoryAug 29, 2011 - 12:00 a.m.

CVE-2011-3192

2011-08-2900:00:00
attackerkb.com
110

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.975 High

EPSS

Percentile

100.0%

JSON

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Recent assessments:

ProxySpider at December 12, 2020 11:24pm UTC reported:

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 5

References

Related

nessus 35
prion 5
ubuntucve 3
openvas 43
cve 5
debiancve 4
attackerkb 3
veracode 3
alpinelinux 2
redhatcve 2
httpd 4
cbl_mariner 1
fedora 4
osv 5
amazon 4
archlinux 1
f5 3
cisa 1
checkpoint_advisories 2
redhat 8
zdt 1
checkpoint_security 1
seebug 3
centos 2
altlinux 3
suse 6
threatpost 2
hackerone 2
ibm 18
debian 5
packetstorm 3
freebsd 2
cert 1
exploitpack 1
oraclelinux 1
securityvulns 3
ubuntu 1
slackware 2
jvn 1
kaspersky 1
exploitdb 1
nmap 1
nessus
nessus
Amazon Linux AMI : httpd (ALAS-2011-01)
2013-09-04 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2011:130-1)
2011-09-06 00:00:00
Amazon Linux 2 : httpd (ALAS-2021-1672)
2021-06-24 00:00:00
prion
prion
Code injection
2011-08-29 15:55:00
Code injection
2007-01-05 18:28:00
Null pointer dereference
2021-06-15 09:15:00
ubuntucve
ubuntucve
CVE-2011-3192
2011-08-29 00:00:00
CVE-2020-13938
2021-06-10 00:00:00
CVE-2021-31618
2021-06-15 00:00:00
openvas
openvas
FreeBSD Ports: apache, apache-event, apache-itk, apache-peruser, apache-worker
2011-09-21 00:00:00
FreeBSD Ports: apache, apache-event, apache-itk, apache-peruser, apache-worker
2011-09-21 00:00:00
Mandriva Update for apache MDVSA-2011:130 (apache)
2011-09-07 00:00:00
cve
cve
CVE-2011-3192
2011-08-29 15:55:00
CVE-2020-13938
2021-06-10 07:15:00
CVE-2007-0086
2007-01-05 18:28:00
debiancve
debiancve
CVE-2011-3192
2011-08-29 15:55:00
CVE-2020-13938
2021-06-10 07:15:00
CVE-2007-0086
2007-01-05 18:28:00
attackerkb
attackerkb
CVE-2017-15715
2018-03-26 00:00:00
CVE-2020-1934
2020-04-01 00:00:00
CVE-2017-9798
2017-09-18 00:00:00
veracode
veracode
Privilege Escalation
2021-06-13 22:57:31
Denial Of Service (DoS)
2021-06-11 22:48:50
Denial Of Service (DoS)
2020-04-10 01:02:22
alpinelinux
alpinelinux
CVE-2020-13938
2021-06-10 07:15:00
CVE-2021-31618
2021-06-15 09:15:00
redhatcve
redhatcve
CVE-2020-13938
2021-06-09 15:44:30
CVE-2021-31618
2021-06-04 18:12:55
httpd
httpd
Apache Httpd < 2.4.48 : Improper Handling of Insufficient Privileges
2021-01-26 00:00:00
Apache Httpd < 2.4.48 : NULL pointer dereference on specially crafted HTTP/2 request
2021-04-22 00:00:00
Apache Httpd < 2.0.65 : Range header remote DoS
2011-08-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2007-0086 affecting package httpd 2.4.46-3
2020-11-05 04:21:24
fedora
fedora
[SECURITY] Fedora 34 Update: mod_http2-1.15.19-1.fc34
2021-06-20 01:08:23
[SECURITY] Fedora 16 Update: httpd-2.2.21-1.fc16
2011-09-30 19:07:35
[SECURITY] Fedora 33 Update: mod_http2-1.15.19-1.fc33
2021-06-20 01:07:30
osv
osv
BIT-apache-2021-31618
2024-03-06 10:55:51
CVE-2020-13938
2021-06-10 07:15:07
BIT-apache-2020-13938
2024-03-06 10:57:27
amazon
amazon
Important: httpd
2021-06-24 02:45:00
Important: mod_http2
2021-07-01 01:04:00
Medium: httpd
2011-09-27 22:46:00
archlinux
archlinux
[ASA-202106-23] apache: denial of service
2021-06-09 00:00:00
f5
f5
K38453823 : Apache vulnerability CVE-2021-31618
2021-06-23 00:00:00
SOL13114 - Apache Range header vulnerability - CVE-2011-3192
2011-10-06 00:00:00
K13114 : Apache Range header vulnerability - CVE-2011-3192
2013-09-12 00:00:00
cisa
cisa
Oracle Releases Security Alert for Oracle HTTP Server Products
2011-09-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTPD Ranges Header Field Denial of Service (CVE-2011-3192)
2011-09-14 00:00:00
Apache HTTPD Ranges Header Field Denial of Service - ver 2 (CVE-2011-3192)
2010-02-25 00:00:00
redhat
redhat
(RHSA-2011:1245) Important: httpd security update
2011-08-31 00:00:00
(RHSA-2011:1294) Important: httpd security update
2011-09-14 00:00:00
(RHSA-2011:1330) Important: JBoss Enterprise Web Server 1.0.2 security update
2011-09-21 16:00:45
zdt
zdt
Obehotel CMS SQL Injection Vulnerability
2013-08-27 00:00:00
checkpoint_security
checkpoint_security
Check Point Response to Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
2011-08-24 21:00:00
seebug
seebug
Apache Range Header Denial Of Service
2011-12-09 00:00:00
Apache HTTP Server Denial of Service
2014-07-01 00:00:00
Apache HTTP Server畸形Range选项处理远程拒绝服务漏洞
2011-08-26 00:00:00
centos
centos
httpd, mod_ssl security update
2011-09-01 11:41:08
httpd, mod_ssl security update
2011-10-20 21:19:56
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.20-alt1
2011-08-31 00:00:00
suse
suse
Security update for Apache (important)
2011-09-06 18:08:19
apache2: Fixed a remote denial of service via byte-ranges (important)
2011-09-02 18:08:23
Security update for Apache (important)
2011-09-06 10:08:12
threatpost
threatpost
Apache Fixes Range Header DoS Flaw
2011-08-31 10:30:00
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
hackerone
hackerone
Gratipay: grtp.co is vulnerable to http-vuln-cve2011-3192
2016-01-25 13:01:41
ownCloud: Apache Range Header Denial of Service Attack (Confirmed PoC)
2015-09-14 22:55:12
ibm
ibm
Security Bulletin: API Connect is affected by an Apache HTTP Server vulnerability (CVE-2011-3192)
2018-06-15 07:07:54
Security Bulletin: Potential security exposure with IBM HTTP Server 8.0 and earlier (PM46234) (CVE-2011-3192)
2022-09-08 00:26:26
Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server shipped with IBM Case Manager (CVE-2020-13938, CVE-2021-30641)
2021-06-23 22:54:33
debian
debian
[BSA-049] Security Update for apache2
2011-09-06 02:06:51
[SECURITY] [DSA 2298-1] apache2 security update
2011-08-29 21:16:25
[SECURITY] [DSA 2298-2] apache2 regression fix
2011-09-05 19:20:44
packetstorm
packetstorm
Obehotel CMS Denial Of Service / SQL Injection
2013-08-26 00:00:00
Opolis.eu Secure Mail Blind SQL Injection / XSS / CSRF / DoS
2013-10-07 00:00:00
ProtonMail.ch Header Injection / CSRF
2014-05-30 00:00:00
freebsd
freebsd
apache -- Range header DoS vulnerability
2011-08-24 00:00:00
Apache httpd -- Multiple vulnerabilities
2021-06-09 00:00:00
cert
cert
Apache HTTPD 1.3/2.x Range header DoS vulnerability
2011-08-26 00:00:00
exploitpack
exploitpack
Apache - Denial of Service
2011-12-09 00:00:00
oraclelinux
oraclelinux
httpd security update
2011-08-31 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability
2011-08-30 00:00:00
Advisory: Range header DoS vulnerability Apache HTTPD 1.3/2.x &#40;CVE-2011-3192&#41;
2011-08-27 00:00:00
Multiple HTTP servers DoS
2011-10-20 00:00:00
ubuntu
ubuntu
Apache vulnerability
2011-09-01 00:00:00
slackware
slackware
[slackware-security] httpd
2011-09-09 14:05:46
[slackware-security] httpd
2011-10-14 23:59:50
jvn
jvn
JVN#23809730: GIGAPOD vulnerable to denial-of-service (DoS)
2014-10-16 00:00:00
kaspersky
kaspersky
KLA12369 Multiple vulnerabilities in Apache HTTP Server
2021-06-01 00:00:00
exploitdb
exploitdb
Apache - Denial of Service
2011-12-09 00:00:00
nmap
nmap
http-vuln-cve2011-3192 NSE Script
2011-08-29 21:42:57

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.975 High

EPSS

Percentile

100.0%

JSON
Related for AKB:45676F06-FBF8-4155-821C-4F98DA984BDA
nessus35prion5ubuntucve3openvas43cve5debiancve4attackerkb3veracode3alpinelinux2redhatcve2httpd4cbl_mariner1fedora4osv5amazon4archlinux1f53cisa1checkpoint_advisories2redhat8zdt1checkpoint_security1seebug3centos2altlinux3suse6threatpost2hackerone2ibm18debian5packetstorm3freebsd2cert1exploitpack1oraclelinux1securityvulns3ubuntu1slackware2jvn1kaspersky1exploitdb1nmap1