Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-3348
HistorySep 20, 2011 - 5:55 a.m.

CVE-2011-3348

2011-09-2005:55:02
CWE-400
[email protected]
web.nvd.nist.gov
608
4
apache http server
mod_proxy_ajp
denial of service
cve-2011-3348
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.248

Percentile

96.7%

JSON

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary “error state” in the backend server) via a malformed HTTP request.

Affected configurations

NVD
Node
apachehttp_serverRange2.2.12–2.2.20
Node
redhatjboss_enterprise_web_serverMatch1.0.0
AND
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
VendorProductVersionCPE
apachehttp_servercpe:/a:apache:http_server::::

References

Social References

More

Related

altlinux 3
nessus 20
debiancve 1
checkpoint_advisories 2
seebug 1
httpd 1
cvelist 1
debian 1
ubuntucve 1
nvd 1
prion 1
openvas 18
veracode 1
slackware 1
amazon 1
threatpost 1
securityvulns 3
fedora 1
suse 2
redhat 3
ubuntu 1
f5 2
oraclelinux 1
ibm 2
gentoo 1
hackerone 1
oracle 1
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : httpd (SSA:2011-284-01)
2011-10-17 00:00:00
Apache 2.2.x < 2.2.21 mod_proxy_ajp DoS
2011-09-16 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2011:168)
2011-11-10 00:00:00
debiancve
debiancve
CVE-2011-3348
2011-09-20 05:55:02
checkpoint_advisories
checkpoint_advisories
Apache HTTPD mod_proxy_ajp Denial Of Service (CVE-2011-3348)
2014-11-12 00:00:00
Preemptive Protection against Apache HTTPD mod_proxy_ajp Denial of Service (CVE-2011-3348)
2011-12-06 00:00:00
seebug
seebug
Apache HTTP Server mod_proxy_ajp拒绝服务漏洞
2011-09-18 00:00:00
httpd
httpd
Apache Httpd < 2.2.21 : mod_proxy_ajp remote DoS
2011-09-07 00:00:00
cvelist
cvelist
CVE-2011-3348
2011-09-19 15:00:00
debian
debian
[BSA-058] Security Update for apache2
2011-11-14 04:20:22
ubuntucve
ubuntucve
CVE-2011-3348
2011-09-20 00:00:00
nvd
nvd
CVE-2011-3348
2011-09-20 05:55:02
prion
prion
Design/Logic Flaw
2011-09-20 05:55:00
openvas
openvas
Apache HTTP Server DoS Vulnerability (Sep 2011) - Linux
2021-11-01 00:00:00
Slackware: Security Advisory (SSA:2011-284-01)
2012-09-10 00:00:00
Fedora Update for httpd FEDORA-2011-12715
2011-09-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:03:06
slackware
slackware
[slackware-security] httpd
2011-10-14 23:59:50
amazon
amazon
Medium: httpd
2011-10-31 18:19:00
threatpost
threatpost
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
securityvulns
securityvulns
Multiple HTTP servers DoS
2011-10-20 00:00:00
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
2012-02-03 00:00:00
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: httpd-2.2.21-1.fc15
2011-09-16 01:58:28
suse
suse
Security update for Apache2 (important)
2011-11-04 09:08:25
apache2: Fixed several security issues (important)
2011-11-04 09:08:34
redhat
redhat
(RHSA-2011:1391) Moderate: httpd security and bug fix update
2011-10-20 00:00:00
(RHSA-2012:0542) Moderate: httpd security and bug fix update
2012-05-07 00:00:00
(RHSA-2012:0543) Moderate: httpd security and bug fix update
2012-05-07 18:13:40
ubuntu
ubuntu
Apache vulnerabilities
2011-11-11 00:00:00
f5
f5
K15899 : Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
SOL15899 - Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
oraclelinux
oraclelinux
httpd security and bug fix update
2011-10-20 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.248

Percentile

96.7%

JSON
Related for CVE-2011-3348
altlinux3nessus20debiancve1checkpoint_advisories2seebug1httpd1cvelist1debian1ubuntucve1nvd1prion1openvas18veracode1slackware1amazon1threatpost1securityvulns3fedora1suse2redhat3ubuntu1f52oraclelinux1ibm2gentoo1hackerone1oracle1