Oval Definition:oval:com.redhat.rhsa:def:20111294
Revision Date:2011-09-14Version:634
Title:RHSA-2011:1294: httpd security update (Important)
Description:The Apache HTTP Server is a popular web server.

  • A flaw was found in the way the Apache HTTP Server handled Range HTTP headers. A remote attacker could use this flaw to cause httpd to use an excessive amount of memory and CPU time via HTTP requests with a specially-crafted Range header. (CVE-2011-3192)

    All httpd users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2011-3192
    RHSA-2011:1294
    RHSA-2011:1294-01
    Platform(s):Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • httpd is earlier than 0:2.2.3-45.el5_6.2
  • AND httpd is signed with Red Hat redhatrelease2 key
  • httpd-devel is earlier than 0:2.2.3-45.el5_6.2
  • AND httpd-devel is signed with Red Hat redhatrelease2 key
  • httpd-manual is earlier than 0:2.2.3-45.el5_6.2
  • AND httpd-manual is signed with Red Hat redhatrelease2 key
  • mod_ssl is earlier than 1:2.2.3-45.el5_6.2
  • AND mod_ssl is signed with Red Hat redhatrelease2 key
  • BACK