CVE:CVE-2011-3192
CNNVD:CNNVD-201108-440
Apache HTTP Server是一款开源的流行的HTTPD服务程序。
当处理包含大量Ranges头的HTTP请求时，ByteRange过滤器存在一个错误，攻击者可以向服务器发送特制HTTP请求，消耗大量内存，造成应用程序崩溃。
solution:Upgrade apache http_server to a higher version than 2.0.65,2.2.20,and avoid the version [2.0.35,2.0.65),[2.2.0,2.2.20); Upgrade opensuse opensuse to a higher version than 11.3,11.4,and avoid the version 11.3,11.4; Upgrade suse linux_enterprise_server to a higher version than 10:sp2,10:sp3,10:sp4,11:sp1,and avoid the version 10:sp2,10:sp3,10:sp4,11:sp1; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp3,10:sp4,11:sp1,and avoid the version 10:sp3,10:sp4,11:sp1; Upgrade canonical ubuntu_linux to a higher version than 8.04,10.04,10.10,11.04,and avoid the version 8.04,10.04,10.10,11.04