Description

The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges, as exploited in the wild in August 2011, a different vulnerability than CVE-2007-0086.

Remediation

References

CVE-2011-3192

Related Vulnerabilities

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-33359)

WordPress Plugin WordPress Meta Data and Taxonomies Filter (MDTF) Cross-Site Request Forgery (1.2.7.2)

MySQL CVE-2015-4905 Vulnerability (CVE-2015-4905)

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-10003)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-18210)

Severity

High

Classification

CVE-2011-3192 CWE-400

Tags

Missing Update Known Vulnerabilities