Description

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

Remediation

References

CVE-2011-3348

Related Vulnerabilities

WordPress Plugin Popup Anything-A Marketing Popup Cross-Site Scripting (2.0.3)

Ruby Inefficient Regular Expression Complexity Vulnerability (CVE-2023-22795)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-9402)

qdPM Code Execution Vulnerability (CVE-2015-3884)

Apache HTTP Server CVE-2002-0392 Vulnerability (CVE-2002-0392)

Severity

Medium

Classification

CVE-2011-3348 CWE-400

Tags

Missing Update Known Vulnerabilities