Description

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

Remediation

References

CVE-2011-3348

Related Vulnerabilities

WordPress 5.7.x Multiple Vulnerabilities (5.7 - 5.7.8)

WordPress Plugin Badge Designer Lite For WooCommerce includes Backdoor [Only if downloaded via the vendor website] (1.1.0)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15700)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-0023)

WordPress Plugin WP ULike Multiple Vulnerabilities (3.1)

Severity

Medium

Classification

CVE-2011-3348 CWE-400

Tags

Missing Update Known Vulnerabilities