Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:24732
HistoryApr 10, 2020 - 1:03 a.m.

Denial Of Service (DoS)

2020-04-1001:03:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON

httpd is vulnerable to denial of service (DoS). The vulnerability exists as it was discovered that mod_proxy_ajp incorrectly returned an “Internal Server Error” response when processing certain malformed HTTP requests, which caused the back-end server to be marked as failed in configurations where mod_proxy was used in load balancer mode. A remote attacker could cause mod_proxy to not send requests to back-end AJP (Apache JServ Protocol) servers for the retry timeout period or until all back-end servers were marked as failed.

CPENameOperatorVersion
httpdeq2.2.15__5.el6
httpdeq2.2.15__5.el6

References

Related

checkpoint_advisories 2
httpd 1
seebug 1
prion 1
nessus 20
openvas 18
altlinux 3
debiancve 1
debian 1
ubuntucve 1
cve 1
threatpost 1
amazon 1
slackware 1
securityvulns 3
fedora 1
suse 2
redhat 3
ubuntu 1
f5 2
oraclelinux 1
ibm 2
gentoo 1
hackerone 1
oracle 1
checkpoint_advisories
checkpoint_advisories
Apache HTTPD mod_proxy_ajp Denial Of Service (CVE-2011-3348)
2014-11-12 00:00:00
Preemptive Protection against Apache HTTPD mod_proxy_ajp Denial of Service (CVE-2011-3348)
2011-12-06 00:00:00
httpd
httpd
Apache Httpd < 2.2.21 : mod_proxy_ajp remote DoS
2011-09-07 00:00:00
seebug
seebug
Apache HTTP Server mod_proxy_ajp拒绝服务漏洞
2011-09-18 00:00:00
prion
prion
Design/Logic Flaw
2011-09-20 05:55:00
nessus
nessus
Apache 2.2.x < 2.2.21 mod_proxy_ajp DoS
2011-09-16 00:00:00
Slackware 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / current : httpd (SSA:2011-284-01)
2011-10-17 00:00:00
Amazon Linux AMI : httpd (ALAS-2011-09)
2013-09-04 00:00:00
openvas
openvas
Apache HTTP Server DoS Vulnerability (Sep 2011) - Linux
2021-11-01 00:00:00
Amazon Linux: Security Advisory (ALAS-2011-9)
2015-09-08 00:00:00
Mandriva Update for apache MDVSA-2011:168 (apache)
2011-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.21-alt1
2011-09-20 00:00:00
debiancve
debiancve
CVE-2011-3348
2011-09-20 05:55:00
debian
debian
[BSA-058] Security Update for apache2
2011-11-14 04:20:22
ubuntucve
ubuntucve
CVE-2011-3348
2011-09-20 00:00:00
cve
cve
CVE-2011-3348
2011-09-20 05:55:00
threatpost
threatpost
Apache Releases Version 2.2.21 With New Fix For Range Header Flaw
2011-09-14 15:29:14
amazon
amazon
Medium: httpd
2011-10-31 18:19:00
slackware
slackware
[slackware-security] httpd
2011-10-14 23:59:50
securityvulns
securityvulns
Multiple HTTP servers DoS
2011-10-20 00:00:00
APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
2012-02-03 00:00:00
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: httpd-2.2.21-1.fc15
2011-09-16 01:58:28
suse
suse
apache2: Fixed several security issues (important)
2011-11-04 09:08:34
Security update for Apache2 (important)
2011-11-04 09:08:25
redhat
redhat
(RHSA-2011:1391) Moderate: httpd security and bug fix update
2011-10-20 00:00:00
(RHSA-2012:0543) Moderate: httpd security and bug fix update
2012-05-07 18:13:40
(RHSA-2012:0542) Moderate: httpd security and bug fix update
2012-05-07 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2011-11-11 00:00:00
f5
f5
SOL15899 - Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
K15899 : Multiple Apache vulnerabilities CVE-2012-4558, CVE-2012-0883, CVE-2011-3348, and CVE-2010-1452
2014-12-08 00:00:00
oraclelinux
oraclelinux
httpd security and bug fix update
2011-10-20 00:00:00
ibm
ibm
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: Storwize V7000 Unified Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
gentoo
gentoo
Apache HTTP Server: Multiple vulnerabilities
2012-06-24 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: Out-of-date Version (Apache)
2016-11-24 15:09:27
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:24732
checkpoint_advisories2httpd1seebug1prion1nessus20openvas18altlinux3debiancve1debian1ubuntucve1cve1threatpost1amazon1slackware1securityvulns3fedora1suse2redhat3ubuntu1f52oraclelinux1ibm2gentoo1hackerone1oracle1