Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24732
HistoryApr 10, 2020 - 1:03 a.m.

Denial Of Service (DoS)

2020-04-1001:03:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

EPSS

0.248

Percentile

96.7%

JSON

httpd is vulnerable to denial of service (DoS). The vulnerability exists as it was discovered that mod_proxy_ajp incorrectly returned an “Internal Server Error” response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where mod_proxy was used in load balancer mode. A remote attacker could cause mod_proxy to not send requests to back-end AJP (Apache JServ Protocol) servers for the retry timeout period or until all back-end servers were marked as failed.

References

Related

altlinux 3
nessus 20
debiancve 1
checkpoint_advisories 2
seebug 1
httpd 1
cvelist 1
cve 1
debian 1
ubuntucve 1
nvd 1
prion 1
openvas 18
securityvulns 3
slackware 1
threatpost 1
amazon 1
fedora 1
suse 2
redhat 3
ubuntu 1
f5 2
oraclelinux 1
ibm 2
gentoo 1
hackerone 1
oracle 1
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
nessus
nessus
Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : httpd (SSA:2011-284-01)
2011-10-17 00:00:00
Apache 2.2.x < 2.2.21 mod_proxy_ajp DoS
2011-09-16 00:00:00
Mandriva Linux Security Advisory : apache (MDVSA-2011:168)
2011-11-10 00:00:00
debiancve
debiancve
CVE-2011-3348
2011-09-20 05:55:02
checkpoint_advisories
checkpoint_advisories
Apache HTTPD mod_proxy_ajp Denial Of Service (CVE-2011-3348)
2014-11-12 00:00:00
Preemptive Protection against Apache HTTPD mod_proxy_ajp Denial of Service (CVE-2011-3348)
2011-12-06 00:00:00
seebug
seebug
Apache HTTP Server mod_proxy_ajp拒绝服务漏洞
2011-09-18 00:00:00
httpd
httpd
Apache Httpd < 2.2.21 : mod_proxy_ajp remote DoS
2011-09-07 00:00:00
cvelist
cvelist
CVE-2011-3348
2011-09-19 15:00:00
cve
cve
CVE-2011-3348
2011-09-20 05:55:02
debian
debian
[BSA-058] Security Update for apache2
2011-11-14 04:20:22
ubuntucve
ubuntucve
CVE-2011-3348
2011-09-20 00:00:00
nvd
nvd
CVE-2011-3348
2011-09-20 05:55:02
prion
prion
Design/Logic Flaw
2011-09-20 05:55:00
openvas
openvas
Apache HTTP Server DoS Vulnerability (Sep 2011) - Linux
2021-11-01 00:00:00
Fedora Update for httpd FEDORA-2011-12715
2011-09-16 00:00:00
Slackware: Security Advisory (SSA:2011-284-01)
2012-09-10 00:00:00
securityvulns
securityvulns
Multiple HTTP servers DoS
2011-10-20 00:00:00
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
2012-02-03 00:00:00
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-08-12 00:00:00
slackware
slackware
[slackware-security] httpd
2011-10-14 23:59:50
threatpost
threatpost
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
amazon
amazon
Medium: httpd
2011-10-31 18:19:00
fedora
fedora
[SECURITY] Fedora 15 Update: httpd-2.2.21-1.fc15
2011-09-16 01:58:28
suse
suse
Security update for Apache2 (important)
2011-11-04 09:08:25
apache2: Fixed several security issues (important)
2011-11-04 09:08:34
redhat
redhat
(RHSA-2011:1391) Moderate: httpd security and bug fix update
2011-10-20 00:00:00
(RHSA-2012:0543) Moderate: httpd security and bug fix update
2012-05-07 18:13:40
(RHSA-2012:0542) Moderate: httpd security and bug fix update
2012-05-07 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2011-11-11 00:00:00
f5
f5
K15899 : Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
SOL15899 - Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
oraclelinux
oraclelinux
httpd security and bug fix update
2011-10-20 00:00:00
ibm
ibm
Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

EPSS

0.248

Percentile

96.7%

JSON
Related for VERACODE:24732
altlinux3nessus20debiancve1checkpoint_advisories2seebug1httpd1cvelist1cve1debian1ubuntucve1nvd1prion1openvas18securityvulns3slackware1threatpost1amazon1fedora1suse2redhat3ubuntu1f52oraclelinux1ibm2gentoo1hackerone1oracle1